CA2095065C - Secure toll collection system for moving vehicles - Google Patents
Secure toll collection system for moving vehiclesInfo
- Publication number
- CA2095065C CA2095065C CA002095065A CA2095065A CA2095065C CA 2095065 C CA2095065 C CA 2095065C CA 002095065 A CA002095065 A CA 002095065A CA 2095065 A CA2095065 A CA 2095065A CA 2095065 C CA2095065 C CA 2095065C
- Authority
- CA
- Canada
- Prior art keywords
- transceiver
- encryption code
- smart card
- vehicle
- toll
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0866—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means by active credit-cards adapted therefor
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01S—RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES
- G01S13/00—Systems using the reflection or reradiation of radio waves, e.g. radar systems; Analogous systems using reflection or reradiation of waves whose nature or wavelength is irrelevant or unspecified
- G01S13/74—Systems using reradiation of radio waves, e.g. secondary radar systems; Analogous systems
- G01S13/75—Systems using reradiation of radio waves, e.g. secondary radar systems; Analogous systems using transponders powered from received waves, e.g. using passive transponders, or using passive reflectors
- G01S13/751—Systems using reradiation of radio waves, e.g. secondary radar systems; Analogous systems using transponders powered from received waves, e.g. using passive transponders, or using passive reflectors wherein the responder or reflector radiates a coded signal
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
- G06K7/0008—General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/363—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes with the personal data of a user
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B15/00—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points
- G07B15/06—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems
- G07B15/063—Arrangements for road pricing or congestion charging of vehicles or vehicle users, e.g. automatic toll systems using wireless information transmission between the vehicle and a fixed station
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Accounting & Taxation (AREA)
- Computer Networks & Wireless Communication (AREA)
- Finance (AREA)
- Theoretical Computer Science (AREA)
- Radar, Positioning & Navigation (AREA)
- Remote Sensing (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Artificial Intelligence (AREA)
- Computer Vision & Pattern Recognition (AREA)
- Devices For Checking Fares Or Tickets At Control Points (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
A secure toll payment system is realized by transmitting a changeable encryption code from roadside equipment at a toll plaza to a moving vehicle. Thereafter, the moving vehicle uses it to encrypt payment information according to the Data Encryption Standard algorithm. The moving vehicle transmits the encrypted payment information to the roadside equipment which performs a credit or debit transaction. Because the encryption code changes from time to time, so too does the nature of the signal which is transmitted by the vehicle; and fraud, ba sed on electronic eavesdropping, is substantially eliminated. The encryption code comprises an 8-bit random number and a time/date number. Vehicle-mounted apparatus includes a transponder unit and a portable smart card which inserts th erein. The roadside equipment includes a pair of spaced-apart antennas that are sequentially located along an express payment lane at a toll plaza and a compute r (Plaza Server) which controls them.
Description
~O9S~6~
SECURE TOLL COLLECTION SYSTEM FOR MOVING VhT-TTcl.T;..
Tech~cal EYeld This i~.~. on relates to automatic payment systems in general, and more particularly to el~t~. ~Ic toll coUe. ': - for moving .
S Back~round of the Invention Unless a ~ exists to embrace mass ~ and, thus, decrease the use of personal automobiles, traffic delays wiU be a growing and unfortunate fact of life. Ultimately, mass transportation systems will become a more significant part of ~ d~ travel due to population growth and the costs (personal10 and environmental) associated with highways packed with automobiles - each carrying one person. One of the costs comes in the form of highway cc ~r' ~ ~ and the anguish that accompanies long traffic delays. IIo.._~_r, until more convenient and cost40mpetitive, mass transportation systems become d~ ~'1e, it is desirableto improve the highway c~ :~g ~ - I) ~b~enl, and nowhere is it worse than around15 toll booths.
The use of toll booths on highways is viewed as a mixed blessing by I " riQ~Q Most will agree that safe, I 'g~- s~d, weU-maintai~ed highways are vital to the quality of their life; that such highways are eApens;~_, and that toll booths provide an equitable way to pay for them. On the other hand, most wiU agree that20 stopping in order to pick up a ticket and/or make a payment is an annoyance, particularly during peak traffic periods when toU payment queues exceed several minutes. The fuel wasted and pollution created, while waiting in a queue, is s;gn:Gcant when large numbers of automobiles are involved. C- - - ' i~ the many con~ es d~. "-''- in present day automobiles and the generaUy high qua}ity of 25 to11 roads, the ~ m~dllce ~ ycd by .~-otc ~ when encountering a traffic delay is somewhat surprising. Nevertheless, the desire for L~; ~,ascd transit speed appears insatiable.
U.S. Patent 4,338,587 discloses a vehic1e toll collection system that automatically iden~f.'~s vehicles in an "express" lane. In order to benefit from the 30 express lane, vehicles are eq~lipped with radio k ~ucncy IIAn.~ e~S that send data to el~llonic toll coll~ ng apparatus to identify the vehicle using inÇo..--~;ol- such as the state of r~gi;,tl~tion and license number. Tolls are billed to the vehicle owner's account, and pa~.,-cnt is disbursed by an agency that both issues license plates and coUects to11 payments (in advance) from the vehicle owner. Although this
SECURE TOLL COLLECTION SYSTEM FOR MOVING VhT-TTcl.T;..
Tech~cal EYeld This i~.~. on relates to automatic payment systems in general, and more particularly to el~t~. ~Ic toll coUe. ': - for moving .
S Back~round of the Invention Unless a ~ exists to embrace mass ~ and, thus, decrease the use of personal automobiles, traffic delays wiU be a growing and unfortunate fact of life. Ultimately, mass transportation systems will become a more significant part of ~ d~ travel due to population growth and the costs (personal10 and environmental) associated with highways packed with automobiles - each carrying one person. One of the costs comes in the form of highway cc ~r' ~ ~ and the anguish that accompanies long traffic delays. IIo.._~_r, until more convenient and cost40mpetitive, mass transportation systems become d~ ~'1e, it is desirableto improve the highway c~ :~g ~ - I) ~b~enl, and nowhere is it worse than around15 toll booths.
The use of toll booths on highways is viewed as a mixed blessing by I " riQ~Q Most will agree that safe, I 'g~- s~d, weU-maintai~ed highways are vital to the quality of their life; that such highways are eApens;~_, and that toll booths provide an equitable way to pay for them. On the other hand, most wiU agree that20 stopping in order to pick up a ticket and/or make a payment is an annoyance, particularly during peak traffic periods when toU payment queues exceed several minutes. The fuel wasted and pollution created, while waiting in a queue, is s;gn:Gcant when large numbers of automobiles are involved. C- - - ' i~ the many con~ es d~. "-''- in present day automobiles and the generaUy high qua}ity of 25 to11 roads, the ~ m~dllce ~ ycd by .~-otc ~ when encountering a traffic delay is somewhat surprising. Nevertheless, the desire for L~; ~,ascd transit speed appears insatiable.
U.S. Patent 4,338,587 discloses a vehic1e toll collection system that automatically iden~f.'~s vehicles in an "express" lane. In order to benefit from the 30 express lane, vehicles are eq~lipped with radio k ~ucncy IIAn.~ e~S that send data to el~llonic toll coll~ ng apparatus to identify the vehicle using inÇo..--~;ol- such as the state of r~gi;,tl~tion and license number. Tolls are billed to the vehicle owner's account, and pa~.,-cnt is disbursed by an agency that both issues license plates and coUects to11 payments (in advance) from the vehicle owner. Although this
-2- ~9~5 technique is useful, it requires a great deal of ~ ~minictrative overhead and issusceptible to fraud. For eY~ml le, the t~ ;on of inco.lecl inforrn~ )n (dhe license number of another vehicle) is not detected until dhe next time the owner of dhe odher vehicle is billed.
S U.S. Patent 4,963,723 di~rlo$~P,s an automatic toll collector for toll roads which requires the driver of a vehicle to insert an ~ g~ d circuit (IC) card into each toll booth. The IC card stores both license and bank account inform~tion Tolls are withdrawn from the càrd holder's banlc account, and means are provided for cc p, ~ 1,, the license information with the actual license plate which is acquired as 10 the vehicle passes th~ough dhe toll booth. IIo~cr, this system offers litde or no o~v,..enl in the speed of toll collPcti~n since the driver is required to stop. But even if the i..rcul.lation on the IC card were clc~ nicdlly ~ to the toll booth, dhe Ll~ u.cd security against fraud comes at great inco..~cniellce to both the card holder and the highway authority. Card holders should be able to pay the toll 15 for any vehicle dhat they happen to be in (a friend's car, a rental car, etc.), not just specific ~,~,hiclcs, and ld~iti---' e~uipn~ is needed to read each license plate. The latter is not only a sig~ifi~qnt teçhnicq1 c~ prlgp but also requires cooper.qtion among various states rega.~lhlg license design if out-of-state drivers are to benefit from such a system.
One popular l~ch~ Je for making high speed toll pd~menl~i iS through the use of a miniature ~ ;,pon~l~Pr that attaches to the wi~dshirl~l of a vehicle and ~.~oadc&st~ an j~Pntifica~ion signal when it enters an ele~;l.v,llagne~ic field having p.~l~t~,....h~dcl~ te~ ti~s. Becausesuch~ o~ f ~operateatradio fi. ~ ~iPs, they have become known as RF-tags. Unfo i~ ~ Iy~ electronic 25 ea~C~S~Opping iS relatively easy in such a system; the ~ d i(lentificqtion signal can be ' ~t r~e~: ~ recorded, and rebroadcast by another vehicle to avoid toll p~-..e.,~. It appears to be a fact of life that when theft is too easy to accon ~ h, even the most honest people indulge; and when theft requires great effort, even scoundrels behave.
In systems where payments are made by the transfer of data, care must be t. ken to assure that the data l~pr~se,lts an accurate indication of the purported inforrn~qition Tamp~Pring with the device cont~ining the data can produce various und~f ~h ~ble results that compromise the integrity of the data and thereby defeat the payment scheme. For eYvrnrlP~ if the account number on a credit card is altered,3S then the transaction is charged to the wrong person; and if the cash balance on a ~ 3 ~ 3~
debit card is incn,as~ in an, - h ~ ~d manner, then the creditor is defre~ 1Pd It is therefore ~ to provide a secure toll co11~;o~ scheme for moving vehicles.Sununar~r of the In~ention In ac ~ e with the invention, secure toll payment is accomplished S by I - l 1, a~ ~-bl~ ver~ numbertoamovingvehicle. I~-r- r-the moving vehicle uses the ~ r ~ ~ ' - ' number to encrypt the ~,_. fi - - - number a~c~ ~:ng to a predetermined algorithm and then bl. ~Cs~Q~Q the resulting signal.
Because the, ~ r '-- ~ number changes from time to time, so too does the nature of the signal which is l~ ~,adc~l by the vehicle; and fraud, based on ele~ ic 10 e~ rl ~ ~E. is substantially eliminated.
In an illustrative embodiment of the invention, the verifi~tion number comprises an 8-bit random number and a time/date number. A smart card is inserted into a ~- '~ mounted transpondel unit, but is easily removed and carried by the vehicle owner. Being no larger than a conventional credit card, the smart card can be 15 carried in the owner's wallet. Approximately one-half second is ~llc ,, ~~ to the smart card and tra ~sl ~r ~ - unit for processing, and a pair of spaced-apart antennas are sequentially F ~ : ~ d in an expres,s payment lane at a toll plaza to accommodate vehicles moving at high speed. j~
In the illustrative embodiment, a debit card is locked during the debit 20 process, and 1 1c -~Pd when it is ; c ~1y completed. This prevents fraud by those who would remove the card from the tra...sl>ondel during the debit process in order to avoid making payment.
Security i~s further improved by use of the Data Encryption Standard (DES) algorithm, stored in the the smart card's memory, to encrypt the en~ ,lion25 code into C~h~Al. DES has the advantage that it is well known and documented.It is a private key system that is highly secure as long as the pdvate key is kept secret. DES has the further a l~,a.l~ge that its ciphe~tcAl output is lev~ i.e., C~;PhC~Al C can be decrypted back into the odginal message M using the same private key.
30 Brief Descriplion Or ~e Drawin~
The invention and its mode of operation will be more clearly understood from the following detailed desc ription when read with the appended drawing in which:
4 ~5~
FIG. 1 is a bird's eye view of a highway toll plaza that includes an express 1ane for toll co1l~ctior using a two~ system in accordance with the invention;
FIG. 2 illustrates a r~ n.,l;n high speed toll collection system in 5 ncc~ :d- l~ with the invention;
FIG. 3 d:C- lG~s a block diagram of the e~luil"Lcnt located at a toll plaza for collecting payments in ~ccord-~ ~e with the invention;
FIG. 4 shows a l...n~ ?onde. mounted on the interior windshiel~l of a vehicle and a motorist inserting/removing the smart card;
FIG. S shows a ~ s~,onder with a smart card inserted therein such as used in the present L.~,nlion;
FIG. 6 diQrloses a block diagrarn of the tran;")olldel used in the present invention;
FIG. 7 is a block diagram of the major r - -tionsl co"lponelll~ of a smart 15 card l"~.~,o ~ ~ct~ d to a l~ad~,./w-it~,r unit and their general int~;onnpcl;~ with each other;
FIG. 8 is a flow diagram that illu~tr~t~s the various steps perf~ d in p~ nC~ g the invention; ,~
FIG. 9 IUQ-CIO~S the format of a 128-bit transponder data frame 20 co.--p. ;.~:ng fixed and variable data frames;
E~IG. 10 ~ ses the format of the fixed data frame portion of the tr~nspo~ .r data frame;
FIG. 11 d;QC10~S the format of the variable data frame portion of the tra wponder data frame, tral~."ilt~,d by the vehicle to antenna 1 of the Roadside 25 Reader (RSR), i" ~ 'y after an activation signal is l~ceived;
E~IG. 12 ~J:sclo~s the format of the variable data frame portion of the tral~ponde. data frame tl ~nS-~ ,d by the RSR to the vehicle from antenna 1, this ..r~ ~~ion is also referred to as the encryption code;
FIG. 13 ~j QC1OSPS the format of the variable data frame por~ion of the 30 transponder data frame tr~ l~mi~ted by the vehicle to antenna 2 of the RSR; and ~ IG. 14 di SCIOSeS the format of the variable data frame portion of the llanspollder data frame tr~nQmitted by the RSR to the vehicle from antenna 2, this information is also referred to as the encrypted acceptance message.
- 5 - 2 ~
Detailed D~~
Briefly, the present invention resides in a system that allows vehicles to pass through specially ~esignPd to11 booths at relatively high speeds - at least as high as safety con~ Prs~tion~ allow. As motorists applu~ch the toll booth, they insert a 5 smar~t card into a I - p ondvl unit which reads iflPnrifir ~n inform~~iûn stored on the card and transmits it, via radio f ~,vn~i~, to a roadside reader (RSR) whichco .p~ ;~FS a pair of spaced-apart antennas and a com,l~ (Plaza Server) which serves the toll booth in matters of elecll. - s toll payment. In lvsponse, the RSR
either debits the card or charges the toll to the motorist's account. The details of this 10 1 - ~-- - are then t-~nC-~ d from the roadside controller back to the l~anspûnder, and a record is written into the smart card. This system is iml kPmPntPd in such a way that it operates with fixed or variable payment toll booths. Further, teçhniqup~s are di~losed that prevent fraud while providing ~im-~.n co--~ei ie-lce to both the motorist and the highway authority. These benefits will become appa.ent as the 15 details of ~ ~ Pntation are lv~
FIG. 1 di~clc~ s a bW's eye view of a toll pa~lhv~ll area which uses the to11 collPctior system of the present invention. The toll paymvnl area co~r~;ecs an enlarged portion of highway and a number of toll collection b~oths 41-45. Such toll booths may be located at the entrance of a limited access highway, bridge or tunnel 20 where fixed amounts of money are coll~PctPd for the privilege of using that particular facility, or where tickets are given to each vehicle that indicate the location where it entered the highway. Such toll booths may also be located at the exit of a limited access l~igh~.ay where they are used for the collection of variable tolls. There, tickets are collect~pd (to avoid possible f ~ lPnt use later) and payment is 25 d~,~ - ...;.-f d by the particular entrance where the vehicle entered the highway. The present invention is suitable for use in all of these situations.
The enlarged portion of highway includes lane 30 which is used by motorists who wish to use cash or tokens in making toll payments. Unfortunately,making such payments requires that vehicles come to a complete stop, and 30 frequently they must wait until others have completed their payment before beginning their own transaction at one of the toll booths 42-45. The enlarged portion of highway also includes express lane 20 which is used by motorists who are equipped to make electronic payment without stopping. Prior to entering lane 20,however, the motorist inserts a payment card into a transponder unit that mounts on 35 the win-lshie!d (see FIG. 4) or dashboard of vehicle 50. lnformation from the card is -6- ~a9~ 6~
loaded into the ~ ponder which awaits an activation signal from antenna 1. The r Li~ - signal is l~;gge.-,d when a vehicle drives over a loop sensor 25 which, illustratively, is embedded in the roadway just pdor to reaching antenna 1.
ly, antenna 1 continuously Sl~ p ~-~tQ an activation signal. In either S scenario, the activation signal triggets an infotmation exchange between the transponder and antenna 1. Furthet along lane 20, antenna 2 is p~ ;o~d to e~ ~ ng~ additional infotmation with the tra ~p~ - d~r unit in vehicle 50. Theseantennas ate spaced apart to provide a time intetval (approximately 500 mil~ co ~ds) which is used for p.. ~ g the informadon received fiom antenna 1 10 before ~ ing additional infotmation with antenna 2. The results of tiiese ç~r' - ~- are d;spl~d on message display 3 (ill ~ , an c,~ ad sign) under control of a Lane Controller which tells the motorist either to continue ahead in lane 21, or to pull over into lane 22 where toll booth 41 is located. Motorists would be asked to pull over, for example, when there are ~ ~- ~fi~ funds within 15 the card (when debit cards are used), when the card has been reported as being lost or stolen, when data transmission errors are dçt~ct~d etc. At toll booth 41, motorists can purchase debit cards, make cash payment (usua11y because they have ~
inadvenendy entered express lane 20), or increase the moneybalance on their existing debit card. A video camera 4 is pc s ~ - ~ d to photograph the license plates 20 of vehicles that do not make the proper payment, possess a l~s '- - debit card, or are driving a vehicle that does not col..spcr~ to the vehicle class information stored in the debit card.
FIG. 2 illustrates a r~ ti~ view of a multi-lane system for the rapid payment of tolls. It is noted that a single structure 10 combines the functions of 25 antennas 1, 2 and display 3 shown in FIG. 1. The multiple data çYs~-~ betweenthe tra sp~-~d . in the vehicle and structure 10 can occur at data ~r~e~C ~g speeds which permit the use of a single antenna - such as shown. The cost ~s~oc - d with higher data processing speeds suggests that it is more cost crf~l~ at the present time, to use a pair of spaced-apart antennas. Nevertheless, the present invention is 30 adaptable to a single antenna system.
EQUIPMENT
Elements of the ~ ,f~.~,d embodiment are shown in FIG. 3 which the various items used for providing rapid toll COll'~Ctil-: in a multi-lane system. Plaza Server 310 is, ill~.~t~ively, an AT&T/NCR (3400 Class) computer which coml,.u.,~ s with a To11 Authority host COA.~P. , via ~e1ephon~ 1ines (9.6 -56Kh/s), and with the e~u:p. ~f -~ that moni~ors and serves a number of high speed payment lanes. Roadside Reader (RSR) 320 and Lane Controller (LC) 330 each handle up to four lanes under control of the Plaza Server 310. Although ~
5 RSRs and LCs may be c ~ ctP~ to the Server, only one of each is shown for the sake of clarifying the invention. Similarly, only the apparatus needed to handle a single high speed lane is shown. Loop 2S senses an oncoming vehicle in a particular high speed payment lane and delivers this .~ f~ ;on to Server 310 via LC 330.
Antenna 1 then ~ c-,~ an avli~,~icn signal to the ~ ~ n ning vehicle under control 10 of RSR 320. In the illustrative e..,bod;n.v..l, RSR 320 comprises the ~-1 , nP~n1 needed for mod~ /demodu~in~ signals in the radio fie~luellvy (RF) range From 902 to 928 MHz in order to adapt data signals for ~ r.~ on through the air. A
pair of antennas serve each lane. After the vehicle passes these an - - - - s~ the results of the data e ~ vf between the vehicle i , ~ and the n~ s~ are visually 15 cc ' ~!ed to the motorist in the vehicle by means of message display 3 which is driven by LC 330 under control of Server 310 which provides one of a plurality of d ~ P messages. Plaza Server 310 also controls a video camera 4 which is generally used to record the identity of vehicles that do not m~ke proper payment.
PIG. S illu;,tl the appeq~ ~e of the transponder 600 - a vehicle-20 mounted unit which communicates with antennas 1 and 2 to make toll pa~l.,c.l~ andtransfer data to/from smart card 500 which is inserted therein. Tl~nspond ~ 600 attaches to the dashboard or ~ h-P1d (see FIG. 4) of the vehicle via mo~m~ing apparatus 610 which rotates to accommodate various mounting positions. The frontfront surface of the ~,..nspondvl includes a slot for ~vce;~,ii g the smart card, and 25 lights 621, 622, 623 for plu. ' ~g visual ' ~ to the motorist. A block diagram of the interior of ll~nspondcl 600 is shown in FIG. 6. When a smart card is inserted intû lcadv./~.. itvl unit 700, a switch is operated which causes power to be -~
app1ied to the l~ sponder. The transponder may be battery po~.vlvd although the temperature range that the battery must endure is formi~'~blv. In the preferred 30 embod;"-cnl of the invention, primary power is supplied to the transponder through plug 601 which connects to the vehicle battery (12 volts) via a cigarette lighter recep~le. Power condi1ionPr 640 converts the 12 volt input power into output pow- er at 5.0, 6.5 and 8.0 volts. Microcontro11er 650 (i11ustratively an Intel 87CSlFC
8-bit mivluprucessor) includes memory (ROM and RAM) which stores operating 35 instructions for controlling the operation of the transponder. Microcontroller 650 2~9~
controls visual ~ . -tor 620 which GC~ r~;~fs LEDs 621,622,623 (see FIG. 5), andaudible il~ r ~or 630 which co-~p.;~- s a p e~ ic tr~nQ~ucPr plus ~QQc~ ~ e~
o~i11-~rs and timers. Micl~co..t~oller 650 1~ digital data to RF
modulator 670 which has a nominal carrier r.. ]u nGy of 9l5 MHz. The r~od~
S RF signal is amplified by amplifier 665 and del;~e~d to transmitting antenna 680.
Antenna 690 receives RF signals from the equipment shown in FIG. 3. These RF
signals are An~p1;fif d by ~mpl;fi~.r 675, demodulated by RF demo~ - or 670 and the lting data is del;~v~d to Illiw~c -troller 650. Cerlain data is intended for thesmart card, either for pl~ce~s~.g or for storage in the smart card's memory; and this 10 data is delivered to l~,<.dc.h.-iter unit 700 over serial data bu~ 710.
Smart Card Referring now to FIG.7 there is diQclosed a block diagram of a smart card 500 and a ,.,ad~,.h. ~ - unit 700 such as used in co ~ ;OI~ with the present Ll~ - - Although ~ GSC~ in greater detail in U.S. Patents 4,797,898 and 15 4,798,322, a brief ~ ipt or is p.~s d here. Some of the ~ 'r -1 CO- ~Jo~ ns located on smart card 500 are ...ic.upl~ssor 560, electrically erasable programmable read-on1y memory (EEPROM) 550, analog interface circuit 540, secondary winding 521 of transformer 920, and capacitive plates 54~-544.
~licr~p ~ssor 560 includes a central processing unit and memory 20 means in the form of random access memory and read-only memory. A
r"icrol)..,ce~sor available from Intel Cc,l~lalion such as Part No. 80C51 may beused with the proper programming. O~ 11 under Gll~ , control provided by its internal read-only memory, the l..icloplocessor 560 formats data to the EEPROM
550 and to the l-,adc-hl -iter unit 700 via the analog interf~ce circuit 540.
25 EEPROMS are availab1e from a number of s. pplie.~. Data may be written to or used from an EEPROM r~,pe ~ 1y while oper~ting power is being applied. When operating power is removed, any changes made to the data in the EEPROM remain and are l~lic~,able whenever the smart card 500 is again powered.
The analog interface circuit 540 provides a means for interf~ing smart 30 card 500 with read."/~. liler unit 900. Within analog ~ -~erf~ce 540 are circuits ~ ,sponsive to capaçitors 541-544, for e~rch~ng~ data with reader/writer unit 900.
Power for ope.d~ing the card 500 is provided to the analog intRrface circuit 540 via inductive transfer, received by the secon~~ry winding 521 of transformer 720. This transformer is formed when secondary winding 521 is coupled to a primary 20~a~
winding 721 within the read~/~.ri~- unit 700. The Irr--cfQr n~r 720 may usly include a ferrite core 722 in the reader/writer for ~ d coupli~
between the i -- ~nl,~.er primary winding 721 and secQnAqry winding 521. A second such core 522 may also be included within the smart card portion of ~,~j~ r~"~"e~ 720 S to further increase l~ ~u~ ' ~g ~ u ~. The pdmary winding 721 is driven at a 1.8432 MHz rate by power supply 930 whose operation is desc~ d with particularity in U.S. Patent4,802,080 issued January 31, 1989.
Within the l~,a~.h.litel unit 700, analog interface circuit 740 çYr~ s data with the smart card 500 under control of miclol,locessor 760. Capacitor 10 plates 741-744 are aligned with the mating c ~a~?~r plates 541-544 within the smart card 500. The input/output serial dat.. ' ~1 rfP~e 750 is basically a universal asynchronous receiver transmitter (UART) which may be a~ ag~ O~ in~l ded in the mic~, OCCSSOI 760.
PROCESSING
Preload Users protect their smart card as they protect their credit card, typically by carrying it in theirwallet. Adva lt~~~ , once the card is removed from the S tra ~1' o - '~ r, the tra - . r ~ ~ is no longer .p~ ,P~_ for the payment of tolls.
IIo~ r, the smart card itself continues to be useful for the payment of other goods and services. Indeed, there is c~ -- ~ '7- ~'r marketing appeal for a card, issued by a regional i ~n~ r authority, that can be used for the payment of related highway services such as roadside i 1eE' --- restaurants, gpQo~ e~ and even 10 9~eed ~&tickets.
As illustrated in FIG. 4, a motorist inserts smart card 500 into the transponder 600 sometime before having to make an electronic toll pa~ enL
Typically this occurs when he enters the vehicle if a toll booth is eYpected Upon insertion of the card, the transponder delivers various messages. If the red light 622 15 turns on and a long buzz is heard, the card is not being inserted cc,~ ~. When it is COIl~ inserted, a double beep is heard and the transL ~ then indicates the money ba1ance available on the card. The lights flash to indicate the balance available on the card to the nearest dollar. Every flash of green light 621 means $100, every flash of red light 622 means $10, and every flash of yellow light 623 20 means $1. If the motorist wishes to learn the balance while the card is in the tra~c~ - 600, he simply removes and reinser~s it. When the balance falls below acertain dollar amount, the yellow light will begin flashing. The card should then be taken to the toll authority as soon as possible to credit more money into the card.
The low balance amount is sl~cified at the time of ~ 't~ and can be changed 25 by the toll authority.
Da~a Rr~h l"c - Overview In a!GCQI'd''"''~ with the invention, FIG. 8 provides an overview of the data eY~ ,f between a moving vehicle and toll plaza equipment as the vehicle p og.~i;,ses through an express payment lane. It is assumed that the smart card 30 remains poeitioned within the l.dr-~p~-~d~r during these data exçh~nges Initially, a lO0p sensor provides a signal to the Lane Controller i.,d;~ ~;ng that an on~oming vebicle is within the range of antenna 1. The Plaza Server then causes antenna 1 to transmit an ~livalion signal to the l-allsponder within the moving vehicle. In 11 2~9~
~ ,pOllSe to the activation signal, the transponder transmits data, comprisin~ ~he data frames of FIG. 10 and 11, which have been preloaded into the micluconlloller of the transponder from the smart card. For improved security, the smart card is locked at this time. (Locking means that the first byte of the file within the smart card that S contains its ID number and vehicle class has hey~ cimsl C - ~,t~r FF written into its first byte, and the card cannot be used for a new l~ ;ol until this character is removed). At the same time, the yellow light on the transponder is turned on to indicate that a tr~nc~tion is pending.
When this data is received, the P1aza Server gellerat~s an encryption 10 code which includes an 8-bit random number plus an indin~tion of the time-of-day and day-of-year. This i,lro.n-a~;on is packed into a 128-bit transponder data frame, co ~.pr;~il-g the fixed data frame of FIG. 10 and the variable data frame of FIG. 12, and 11 -- iStPd to the moving vehicle via antenna 1. At the same time the Servereither uses the Card ID number to look up its secret code, or it gelleldt~s the secret 15 code (K) using the Card ID number and a secret ~l~orit~ The secret code, the encryption code, and the money ba1ance of the smart card (when it is used as a debit card) are combined and processed using the DES a1go,i~ l to generate an encrypted number (P') to be coll,p~,d with an encrypted number (P) gw~ldted by the smart card. DES ~I.CI~ iOn pl~cess;ng occurs during the 500 millisecond interva1 20 allocated for transit between antenna 1 and antenna 2. (A brief time interval is required by the present generation smart card, for eY~hqrg g and processing data.
This time interval is such that a vehicle will have moved too far, at maximum speed, to be served by a single antenna.) At the same time still, the Server searches to dct~,.lllinc whether the Card ID is among its list of lost or stolen cards. If it is not, 25 then toll charges are calcu~ In some ~itU~tion~ the toll is a fixed amount, and in other situations the toll depends on the location where the moving vehicle enters a Iimited-access highway. Each toll plaza is progla.l,ll.cd to write its location into the smart card along with the time-of-day that a smart card-equipped vehicle passes through. Thus, whenever the vehicle arrives at the next toll plaza, toll charges can be 30 properly c~ q~d~ Using this data, an acceptance message (such as indicated inFM. 14) is encrypted for transmission to the moving vehicle. Note that this information includes the location of the present toll plaza, the present time-of-day, a black list bit, and the amount to be debited from the card. In the situation where a credit card (rather than a debit card) is used, the transaction amount is stored and 35 used only as a record.
- 12- 20g~065 Antenna 2 transmits the encrypted acceptance message to the Lra~ JoA~de~ of the moving vehicle where this data is dc~,ly~ d and used to debit the card. ~- Jiti - - - 'ly, the smart card is unlocked based on information in the d~ ~p' message. If, for example, the black list bit ld- I ~f ~ that this is a stolen smart card, it S will remain locked. Similarly, if the smart card is 1~ ,d from the transponderbetween antenna 1 and antenna 2 in an attempt to avoid debit charges, the card will remain locked. A ~ c ~ul tlansd~;t .1 cor '~ ~. s with an audible sound ' ~ g same and the yellow light on the llansp~ - ~ is turned off to indicate that the - ~ is ~ p.'.~: .
The motorist is notified of succcs~ful and ~ ,cce--r~l transdclions by the message display at the toll plaza An I ~--cc~ ~-rul transaction would result when the amount of money in the debit card is inadc~udte, the card is lost or stolen, the card is removed from the trLIsponde,- before it completes its llnn-~ ;on to antenna 2, error in data ploce~,:ng, or some other ill~,g~ ily worthy of attention. In 15 these ~ s, the motorist is instructed to pull over to a particular toll booth, but if he does not comply the video camera is activated to record the identity of the vehicle.
Information is eYr~ ,e ~ between the l,.n~ponde. and the SeNer using the p.~d~ t~ ~ .--ined format shown in FIG. 9. This format is used by both the 20 tr~si~nder and the RSR and comprises 128 bits. The transpolld~, data frame includes fixed and variable portions plus a 16-bit cyclic redundancy code (CRC) used to verify the accuracy of ~ on The Fixed Data Frame is shown in FIG.
10 and contains inf.,.. ~io~l supplied by the smart card in the transponder of the vehicle. The first 16 bits of the fixed frame are the used to identify the type of 25 tran~ e - being used, the class of vehicle, and the idenl f e ~ - of the particular smart card. Because improved transponder design is an" ir ~ ~. it is necessary to identify the kind of transponder being used. Further, because different classes of vehicles pay different amounts of toll, it is nccessdl~ to identify vehicle class.
Finally, the l, ~ ss;on of smart card ID enables use of a credit (rather than debit) 30 card and provides i...plO~Cd security against theft and forgery. Indeed, the thrust of the present invention is to improve such security.
Data Exchange - Detailed -13- ~(~9~iQ~j5 When the vehicle first enters the toll pa~l ' ' area, the Plaza Server stimulates the transpondcl - via an ~cli~ on signal transmitted by antenna 1. Data are e ' lg~d between the transpc - ~ and antenna 1 using a modulated 915 MHz cal~ier signal. In response to the a~ tion signal, the tra - L - - ' - initiates a "wake S up" call to the mi.,l~,,r~ssor in the smart card, and the ~ d~ - sends a 128-bit "tra -, ~r~ data frame" to antenna 1. The ~ spondcr data frame comprise~s a fixed frame of 40 bits (see PIG. 10), a variable frame of 72 bits (see PIG. 11), and an error-co~ ing code of 16 bi~s. At this time there is no encryption, and vehicl identification, smart card ide ;t;r~c ~;on and location inf~ r are transmitted in 10 clear text. This inf~ ~ - - is used by the Plaza Server for toll calculation. The location inf~ ~ ~r is generally written into the smart card by Servers located at higL~. a~ entrances and read by Servers located at exits for the c~ la~i~ - of variable tolls.
In ~sp~ ~e to the above transmission, the Server returns a similar 15 tra--spor~er frame to the vehicle, ~- ..v~er the variable data frame tr~ -Q~itt~d is now shown in FIG. 12 and includes a 16-bit time/date number and an 8-bit "random"
number. In the ~! ~f~ cd embodiment of the invention, they cooperate to form an encryption code. The time/date number r~l,.vsc..ls the numbe,f of ten minute increments that have transpired since January 1 of the current year using C1C~ .; ,L
20 Mean r1me. Purther, the "random" number cc ~pri~vs eight bits which provide up to 256 different bit patterns that can be used to encode the data ' - ~g~ between the tra ~pon~er and the Server. The "random" number is periodically changed to foil sc. - ~' who would record such data exc~-n~ - and then replay them to avoid tollpayments. The eL~ code therefore c~ p. ;.~s a predictable portion and a 25 non-p~ '- portion where the p~vc'- 1~'- portions repeat yearly. What this means is that a different en~ tion code is guaranteed every ten minutes of the year, and that within that ten minute period, one of 256 possible codes will be opela~And although next year at the same time, a known portion (time/date number) of the cn~ ion code will be ~F'; d, there is only a small chance (1 in 256) that it will 30 be the same as the previous year. Altv.,-ali~vly, bits 9-72 in FIG. 12 can all be randomly selected for even greater security.
The vehicle ~.ansponde- now has all the nccess~, information to encrypt data for ~-hr~ ission to antenna 2. At this time, the smart card is locked to prevent the possibility of removal before it can be properly debited. If the card is 35 otherwise acce~lab1c, as determin~d by the Server, it is unlocked when antenna 2 - 14- 20~065 ce 1" ~ the debit process. "Locking" means that the smart card cannot be used for any payment until is it returned to the card issuer and I -'or~Pd Loeking also takes place when the eard is i-iPntifif'd as being a lost or stolen eard and a "finder'1 attempts to use it. Briefly, the signifieant information reeeived from antenna 1 during the 5 avti~ ~ - mode is the e.~ r eode whieh, illu;,h~i~ , ineludes the time/date number and the random number eontained in the variable data frame.
Acdvation Pt~ces~
An el~v~ ion ~ -- que that has gained wide a~c~pt - - e is the Data Encryption Standard (DES) and is intended for implementation in special purpose 10 elvvhl -tc deviees. In 1977, the National Bureau of Standards (now NIST) issued DES as a Federal standard, and the National Security Agency has certified new produets using the standard. While a relatively brief d;~c.,~;o~ of the ap~' -- or of DES to the ~ ~ - ~ a is set forth below, a more coml).el e,.~ treatment is set forth in the January 15, 1977 Federal Inf - -- Processing Standards E~llblif Dtion 4615 (FIPS 46), entit1ed "S~ for the Data Eneryption Standard."
DES is a ~ dt~, key scheme in whieh both Cn~ g and decrypting keys are identical and seeret. DES operates on data in bloeks,of 64-bits, sending it through 16 stages of the algorithm before exiting as a 6~bitvipl~f~ F~ ,lion relies heavily on proper management of keys - the strings of ~ that must be20 input to the algo ilh.~.s before f.,n~ pliOn or d~ )lion ean take place. The DES
a1gorithm D enerypts a 64 bit message M into c;~ 1 C - a proeess that is mathematieally stated by the equation C = D(M). The output signal is available in 64-bit-wide binary form for delivery to the destination station.
DES pl~JCccds by rearranging (permuting) a 6~bit message accolding to 25 a known pattern in an oper~ior akin to shuffling cards. The perrnu~d block of 64-bits is now sp1it into two blocks, each co ~ ;ng 32-bits in an operation akin toeutting the eards. At this point, the card shuffling analogy fails because math~ -1 op~r, ~io~ (modulo 2 addition) and cipher function (f) are introduced along with a key K. Values for Kl. . . Kl6 are selected in accord~ -~e with 16 30 different pred~ d - he ' 1~ ~ whereby each K O co~nl,. ;ses an ordered ~t of 48-bits ehosen from the 64-bit key. Cipher function (f) denotes an opera~iorl f(M, K) in which a portion (32 bits) of the message M is modulo-2 combined with a portion (48 bits~ of the key K certain pred~ d bits are disc~ded from the resulting combination so that only 32 bits remain. Cipher function (f) is performed 16 times using different portions of M and K.
Transac~ion Processing Although DES is used in the preferred embodiment of the invention, other ~nc~ ion algorithms are possible. Applying DES to the present ~ve~llion S entai1s using the last 64 bits (bits 9-72) of the variable data frame (i.e., the encryption code) as the message M, and a 64-bit secret code as the key K. Note that a secret code is stored in the memory of each smart card. In the preferred embodiment of the invention, the secret code is different for each smart card although such 1lniqoenPss is not required. The secret code is known to the Plaza Server through a look-up table 10 that associates the Card ID with the secret code. Alternatively, the Plaza Server can derive the secret code from the Card ID using a secret algorithm, and thereby avoid having to store the secret code for each smart card.
Reference is now made to FIG. 13 which shows the variable data frame ~mn~ d from the vehicle to antenna 2. Included in this data frame are bits 9-24 15 which is the time/date inforrn~tion just i - nitted by antenna 1, bits 33-48 which ~epr~,senl the money balance rem~ining in the smart card when used as a debit card, and bits 65-72 which is the random number just ~ s~ d by~antenna 1. Bits 9-72 of the variable data frame correspond to message M and are encrypted by the .,.iclupl~essor in the smart card according to the DES algorithm. The secret code 20 stored in the memory of the smart card is used as the key R during DES encryption.
Such e.~ Jtion provides the advantage that if the entire l".n~ icsion (vehicle to antenna 1 and vehicle to antenna 2) is recorded by electronic eavesd.opp~g, it can only be fr~nd-11Pnt1y rebroadcast by another vehicle for the next ten minutes at most.
In the preferred embodiment, however, the Plaza Server changes the random number25 for each new vehicle, and fraudulent rebro~dc~ting of h.le..;epled information is virtually çlir~
FIG. 14 discloses the variable data frame tr~nsmittçd from antenna 2 to the vehicle which completes the transaction. As in~ ed above, the present location and time-of-day are transmitted for storage in the smart card memory. Such 30 information is most useful when it idçntifiPs the entrance location of a limited access highway. Also tr~n~mitted is a repeat of the money balance of the card and the transaction amount to be debited. In the case where the smart card is a debit card, the~transaction amount is used to decrease its money balance; and in the case where the smart card is a credit card, the transaction amount is merely stored as an -16- ~t~a65 ele~,hvnic receipt. Jn either event, this message is known as the ac~ ep~ - ,e message and it includes a "Black List Bit" and a "Grey List Bit" which are used to keep the smart card locked when the Plaza Server d~ t~ r 5 that further use of the smar~
card is ' lp~ It is finally noted that this ~~ep~ - ~ message is encrypted S using the same encryption code (random number and timeldate number) to enhance system ~curity.
Although a particular embodiment has been shown and des~ ~ ikA it is 1~ de- ~ ~ood that various modifications can be made within thie spirit and scope of the invention. These modifications include, but are not 1imited to, the use of enicryption 10 a1gori*ms other than DES having greater or lesser security; building thie smart card function into the i ~spc - d~ ~ unit in a non-portable manner; the use of other predictable or non-predictable numbers as the ~ lc ~plion code; the u~ of dilre.. ~
data ;~tl~.,h.~,s within the tra~ ,~ndcr data frame; and the use of a single antenna at thie toll plaza to communicate with the moving vehicle.
.~' - . ' , ' , .
- : .
S U.S. Patent 4,963,723 di~rlo$~P,s an automatic toll collector for toll roads which requires the driver of a vehicle to insert an ~ g~ d circuit (IC) card into each toll booth. The IC card stores both license and bank account inform~tion Tolls are withdrawn from the càrd holder's banlc account, and means are provided for cc p, ~ 1,, the license information with the actual license plate which is acquired as 10 the vehicle passes th~ough dhe toll booth. IIo~cr, this system offers litde or no o~v,..enl in the speed of toll collPcti~n since the driver is required to stop. But even if the i..rcul.lation on the IC card were clc~ nicdlly ~ to the toll booth, dhe Ll~ u.cd security against fraud comes at great inco..~cniellce to both the card holder and the highway authority. Card holders should be able to pay the toll 15 for any vehicle dhat they happen to be in (a friend's car, a rental car, etc.), not just specific ~,~,hiclcs, and ld~iti---' e~uipn~ is needed to read each license plate. The latter is not only a sig~ifi~qnt teçhnicq1 c~ prlgp but also requires cooper.qtion among various states rega.~lhlg license design if out-of-state drivers are to benefit from such a system.
One popular l~ch~ Je for making high speed toll pd~menl~i iS through the use of a miniature ~ ;,pon~l~Pr that attaches to the wi~dshirl~l of a vehicle and ~.~oadc&st~ an j~Pntifica~ion signal when it enters an ele~;l.v,llagne~ic field having p.~l~t~,....h~dcl~ te~ ti~s. Becausesuch~ o~ f ~operateatradio fi. ~ ~iPs, they have become known as RF-tags. Unfo i~ ~ Iy~ electronic 25 ea~C~S~Opping iS relatively easy in such a system; the ~ d i(lentificqtion signal can be ' ~t r~e~: ~ recorded, and rebroadcast by another vehicle to avoid toll p~-..e.,~. It appears to be a fact of life that when theft is too easy to accon ~ h, even the most honest people indulge; and when theft requires great effort, even scoundrels behave.
In systems where payments are made by the transfer of data, care must be t. ken to assure that the data l~pr~se,lts an accurate indication of the purported inforrn~qition Tamp~Pring with the device cont~ining the data can produce various und~f ~h ~ble results that compromise the integrity of the data and thereby defeat the payment scheme. For eYvrnrlP~ if the account number on a credit card is altered,3S then the transaction is charged to the wrong person; and if the cash balance on a ~ 3 ~ 3~
debit card is incn,as~ in an, - h ~ ~d manner, then the creditor is defre~ 1Pd It is therefore ~ to provide a secure toll co11~;o~ scheme for moving vehicles.Sununar~r of the In~ention In ac ~ e with the invention, secure toll payment is accomplished S by I - l 1, a~ ~-bl~ ver~ numbertoamovingvehicle. I~-r- r-the moving vehicle uses the ~ r ~ ~ ' - ' number to encrypt the ~,_. fi - - - number a~c~ ~:ng to a predetermined algorithm and then bl. ~Cs~Q~Q the resulting signal.
Because the, ~ r '-- ~ number changes from time to time, so too does the nature of the signal which is l~ ~,adc~l by the vehicle; and fraud, based on ele~ ic 10 e~ rl ~ ~E. is substantially eliminated.
In an illustrative embodiment of the invention, the verifi~tion number comprises an 8-bit random number and a time/date number. A smart card is inserted into a ~- '~ mounted transpondel unit, but is easily removed and carried by the vehicle owner. Being no larger than a conventional credit card, the smart card can be 15 carried in the owner's wallet. Approximately one-half second is ~llc ,, ~~ to the smart card and tra ~sl ~r ~ - unit for processing, and a pair of spaced-apart antennas are sequentially F ~ : ~ d in an expres,s payment lane at a toll plaza to accommodate vehicles moving at high speed. j~
In the illustrative embodiment, a debit card is locked during the debit 20 process, and 1 1c -~Pd when it is ; c ~1y completed. This prevents fraud by those who would remove the card from the tra...sl>ondel during the debit process in order to avoid making payment.
Security i~s further improved by use of the Data Encryption Standard (DES) algorithm, stored in the the smart card's memory, to encrypt the en~ ,lion25 code into C~h~Al. DES has the advantage that it is well known and documented.It is a private key system that is highly secure as long as the pdvate key is kept secret. DES has the further a l~,a.l~ge that its ciphe~tcAl output is lev~ i.e., C~;PhC~Al C can be decrypted back into the odginal message M using the same private key.
30 Brief Descriplion Or ~e Drawin~
The invention and its mode of operation will be more clearly understood from the following detailed desc ription when read with the appended drawing in which:
4 ~5~
FIG. 1 is a bird's eye view of a highway toll plaza that includes an express 1ane for toll co1l~ctior using a two~ system in accordance with the invention;
FIG. 2 illustrates a r~ n.,l;n high speed toll collection system in 5 ncc~ :d- l~ with the invention;
FIG. 3 d:C- lG~s a block diagram of the e~luil"Lcnt located at a toll plaza for collecting payments in ~ccord-~ ~e with the invention;
FIG. 4 shows a l...n~ ?onde. mounted on the interior windshiel~l of a vehicle and a motorist inserting/removing the smart card;
FIG. S shows a ~ s~,onder with a smart card inserted therein such as used in the present L.~,nlion;
FIG. 6 diQrloses a block diagrarn of the tran;")olldel used in the present invention;
FIG. 7 is a block diagram of the major r - -tionsl co"lponelll~ of a smart 15 card l"~.~,o ~ ~ct~ d to a l~ad~,./w-it~,r unit and their general int~;onnpcl;~ with each other;
FIG. 8 is a flow diagram that illu~tr~t~s the various steps perf~ d in p~ nC~ g the invention; ,~
FIG. 9 IUQ-CIO~S the format of a 128-bit transponder data frame 20 co.--p. ;.~:ng fixed and variable data frames;
E~IG. 10 ~ ses the format of the fixed data frame portion of the tr~nspo~ .r data frame;
FIG. 11 d;QC10~S the format of the variable data frame portion of the tra wponder data frame, tral~."ilt~,d by the vehicle to antenna 1 of the Roadside 25 Reader (RSR), i" ~ 'y after an activation signal is l~ceived;
E~IG. 12 ~J:sclo~s the format of the variable data frame portion of the tral~ponde. data frame tl ~nS-~ ,d by the RSR to the vehicle from antenna 1, this ..r~ ~~ion is also referred to as the encryption code;
FIG. 13 ~j QC1OSPS the format of the variable data frame por~ion of the 30 transponder data frame tr~ l~mi~ted by the vehicle to antenna 2 of the RSR; and ~ IG. 14 di SCIOSeS the format of the variable data frame portion of the llanspollder data frame tr~nQmitted by the RSR to the vehicle from antenna 2, this information is also referred to as the encrypted acceptance message.
- 5 - 2 ~
Detailed D~~
Briefly, the present invention resides in a system that allows vehicles to pass through specially ~esignPd to11 booths at relatively high speeds - at least as high as safety con~ Prs~tion~ allow. As motorists applu~ch the toll booth, they insert a 5 smar~t card into a I - p ondvl unit which reads iflPnrifir ~n inform~~iûn stored on the card and transmits it, via radio f ~,vn~i~, to a roadside reader (RSR) whichco .p~ ;~FS a pair of spaced-apart antennas and a com,l~ (Plaza Server) which serves the toll booth in matters of elecll. - s toll payment. In lvsponse, the RSR
either debits the card or charges the toll to the motorist's account. The details of this 10 1 - ~-- - are then t-~nC-~ d from the roadside controller back to the l~anspûnder, and a record is written into the smart card. This system is iml kPmPntPd in such a way that it operates with fixed or variable payment toll booths. Further, teçhniqup~s are di~losed that prevent fraud while providing ~im-~.n co--~ei ie-lce to both the motorist and the highway authority. These benefits will become appa.ent as the 15 details of ~ ~ Pntation are lv~
FIG. 1 di~clc~ s a bW's eye view of a toll pa~lhv~ll area which uses the to11 collPctior system of the present invention. The toll paymvnl area co~r~;ecs an enlarged portion of highway and a number of toll collection b~oths 41-45. Such toll booths may be located at the entrance of a limited access highway, bridge or tunnel 20 where fixed amounts of money are coll~PctPd for the privilege of using that particular facility, or where tickets are given to each vehicle that indicate the location where it entered the highway. Such toll booths may also be located at the exit of a limited access l~igh~.ay where they are used for the collection of variable tolls. There, tickets are collect~pd (to avoid possible f ~ lPnt use later) and payment is 25 d~,~ - ...;.-f d by the particular entrance where the vehicle entered the highway. The present invention is suitable for use in all of these situations.
The enlarged portion of highway includes lane 30 which is used by motorists who wish to use cash or tokens in making toll payments. Unfortunately,making such payments requires that vehicles come to a complete stop, and 30 frequently they must wait until others have completed their payment before beginning their own transaction at one of the toll booths 42-45. The enlarged portion of highway also includes express lane 20 which is used by motorists who are equipped to make electronic payment without stopping. Prior to entering lane 20,however, the motorist inserts a payment card into a transponder unit that mounts on 35 the win-lshie!d (see FIG. 4) or dashboard of vehicle 50. lnformation from the card is -6- ~a9~ 6~
loaded into the ~ ponder which awaits an activation signal from antenna 1. The r Li~ - signal is l~;gge.-,d when a vehicle drives over a loop sensor 25 which, illustratively, is embedded in the roadway just pdor to reaching antenna 1.
ly, antenna 1 continuously Sl~ p ~-~tQ an activation signal. In either S scenario, the activation signal triggets an infotmation exchange between the transponder and antenna 1. Furthet along lane 20, antenna 2 is p~ ;o~d to e~ ~ ng~ additional infotmation with the tra ~p~ - d~r unit in vehicle 50. Theseantennas ate spaced apart to provide a time intetval (approximately 500 mil~ co ~ds) which is used for p.. ~ g the informadon received fiom antenna 1 10 before ~ ing additional infotmation with antenna 2. The results of tiiese ç~r' - ~- are d;spl~d on message display 3 (ill ~ , an c,~ ad sign) under control of a Lane Controller which tells the motorist either to continue ahead in lane 21, or to pull over into lane 22 where toll booth 41 is located. Motorists would be asked to pull over, for example, when there are ~ ~- ~fi~ funds within 15 the card (when debit cards are used), when the card has been reported as being lost or stolen, when data transmission errors are dçt~ct~d etc. At toll booth 41, motorists can purchase debit cards, make cash payment (usua11y because they have ~
inadvenendy entered express lane 20), or increase the moneybalance on their existing debit card. A video camera 4 is pc s ~ - ~ d to photograph the license plates 20 of vehicles that do not make the proper payment, possess a l~s '- - debit card, or are driving a vehicle that does not col..spcr~ to the vehicle class information stored in the debit card.
FIG. 2 illustrates a r~ ti~ view of a multi-lane system for the rapid payment of tolls. It is noted that a single structure 10 combines the functions of 25 antennas 1, 2 and display 3 shown in FIG. 1. The multiple data çYs~-~ betweenthe tra sp~-~d . in the vehicle and structure 10 can occur at data ~r~e~C ~g speeds which permit the use of a single antenna - such as shown. The cost ~s~oc - d with higher data processing speeds suggests that it is more cost crf~l~ at the present time, to use a pair of spaced-apart antennas. Nevertheless, the present invention is 30 adaptable to a single antenna system.
EQUIPMENT
Elements of the ~ ,f~.~,d embodiment are shown in FIG. 3 which the various items used for providing rapid toll COll'~Ctil-: in a multi-lane system. Plaza Server 310 is, ill~.~t~ively, an AT&T/NCR (3400 Class) computer which coml,.u.,~ s with a To11 Authority host COA.~P. , via ~e1ephon~ 1ines (9.6 -56Kh/s), and with the e~u:p. ~f -~ that moni~ors and serves a number of high speed payment lanes. Roadside Reader (RSR) 320 and Lane Controller (LC) 330 each handle up to four lanes under control of the Plaza Server 310. Although ~
5 RSRs and LCs may be c ~ ctP~ to the Server, only one of each is shown for the sake of clarifying the invention. Similarly, only the apparatus needed to handle a single high speed lane is shown. Loop 2S senses an oncoming vehicle in a particular high speed payment lane and delivers this .~ f~ ;on to Server 310 via LC 330.
Antenna 1 then ~ c-,~ an avli~,~icn signal to the ~ ~ n ning vehicle under control 10 of RSR 320. In the illustrative e..,bod;n.v..l, RSR 320 comprises the ~-1 , nP~n1 needed for mod~ /demodu~in~ signals in the radio fie~luellvy (RF) range From 902 to 928 MHz in order to adapt data signals for ~ r.~ on through the air. A
pair of antennas serve each lane. After the vehicle passes these an - - - - s~ the results of the data e ~ vf between the vehicle i , ~ and the n~ s~ are visually 15 cc ' ~!ed to the motorist in the vehicle by means of message display 3 which is driven by LC 330 under control of Server 310 which provides one of a plurality of d ~ P messages. Plaza Server 310 also controls a video camera 4 which is generally used to record the identity of vehicles that do not m~ke proper payment.
PIG. S illu;,tl the appeq~ ~e of the transponder 600 - a vehicle-20 mounted unit which communicates with antennas 1 and 2 to make toll pa~l.,c.l~ andtransfer data to/from smart card 500 which is inserted therein. Tl~nspond ~ 600 attaches to the dashboard or ~ h-P1d (see FIG. 4) of the vehicle via mo~m~ing apparatus 610 which rotates to accommodate various mounting positions. The frontfront surface of the ~,..nspondvl includes a slot for ~vce;~,ii g the smart card, and 25 lights 621, 622, 623 for plu. ' ~g visual ' ~ to the motorist. A block diagram of the interior of ll~nspondcl 600 is shown in FIG. 6. When a smart card is inserted intû lcadv./~.. itvl unit 700, a switch is operated which causes power to be -~
app1ied to the l~ sponder. The transponder may be battery po~.vlvd although the temperature range that the battery must endure is formi~'~blv. In the preferred 30 embod;"-cnl of the invention, primary power is supplied to the transponder through plug 601 which connects to the vehicle battery (12 volts) via a cigarette lighter recep~le. Power condi1ionPr 640 converts the 12 volt input power into output pow- er at 5.0, 6.5 and 8.0 volts. Microcontro11er 650 (i11ustratively an Intel 87CSlFC
8-bit mivluprucessor) includes memory (ROM and RAM) which stores operating 35 instructions for controlling the operation of the transponder. Microcontroller 650 2~9~
controls visual ~ . -tor 620 which GC~ r~;~fs LEDs 621,622,623 (see FIG. 5), andaudible il~ r ~or 630 which co-~p.;~- s a p e~ ic tr~nQ~ucPr plus ~QQc~ ~ e~
o~i11-~rs and timers. Micl~co..t~oller 650 1~ digital data to RF
modulator 670 which has a nominal carrier r.. ]u nGy of 9l5 MHz. The r~od~
S RF signal is amplified by amplifier 665 and del;~e~d to transmitting antenna 680.
Antenna 690 receives RF signals from the equipment shown in FIG. 3. These RF
signals are An~p1;fif d by ~mpl;fi~.r 675, demodulated by RF demo~ - or 670 and the lting data is del;~v~d to Illiw~c -troller 650. Cerlain data is intended for thesmart card, either for pl~ce~s~.g or for storage in the smart card's memory; and this 10 data is delivered to l~,<.dc.h.-iter unit 700 over serial data bu~ 710.
Smart Card Referring now to FIG.7 there is diQclosed a block diagram of a smart card 500 and a ,.,ad~,.h. ~ - unit 700 such as used in co ~ ;OI~ with the present Ll~ - - Although ~ GSC~ in greater detail in U.S. Patents 4,797,898 and 15 4,798,322, a brief ~ ipt or is p.~s d here. Some of the ~ 'r -1 CO- ~Jo~ ns located on smart card 500 are ...ic.upl~ssor 560, electrically erasable programmable read-on1y memory (EEPROM) 550, analog interface circuit 540, secondary winding 521 of transformer 920, and capacitive plates 54~-544.
~licr~p ~ssor 560 includes a central processing unit and memory 20 means in the form of random access memory and read-only memory. A
r"icrol)..,ce~sor available from Intel Cc,l~lalion such as Part No. 80C51 may beused with the proper programming. O~ 11 under Gll~ , control provided by its internal read-only memory, the l..icloplocessor 560 formats data to the EEPROM
550 and to the l-,adc-hl -iter unit 700 via the analog interf~ce circuit 540.
25 EEPROMS are availab1e from a number of s. pplie.~. Data may be written to or used from an EEPROM r~,pe ~ 1y while oper~ting power is being applied. When operating power is removed, any changes made to the data in the EEPROM remain and are l~lic~,able whenever the smart card 500 is again powered.
The analog interface circuit 540 provides a means for interf~ing smart 30 card 500 with read."/~. liler unit 900. Within analog ~ -~erf~ce 540 are circuits ~ ,sponsive to capaçitors 541-544, for e~rch~ng~ data with reader/writer unit 900.
Power for ope.d~ing the card 500 is provided to the analog intRrface circuit 540 via inductive transfer, received by the secon~~ry winding 521 of transformer 720. This transformer is formed when secondary winding 521 is coupled to a primary 20~a~
winding 721 within the read~/~.ri~- unit 700. The Irr--cfQr n~r 720 may usly include a ferrite core 722 in the reader/writer for ~ d coupli~
between the i -- ~nl,~.er primary winding 721 and secQnAqry winding 521. A second such core 522 may also be included within the smart card portion of ~,~j~ r~"~"e~ 720 S to further increase l~ ~u~ ' ~g ~ u ~. The pdmary winding 721 is driven at a 1.8432 MHz rate by power supply 930 whose operation is desc~ d with particularity in U.S. Patent4,802,080 issued January 31, 1989.
Within the l~,a~.h.litel unit 700, analog interface circuit 740 çYr~ s data with the smart card 500 under control of miclol,locessor 760. Capacitor 10 plates 741-744 are aligned with the mating c ~a~?~r plates 541-544 within the smart card 500. The input/output serial dat.. ' ~1 rfP~e 750 is basically a universal asynchronous receiver transmitter (UART) which may be a~ ag~ O~ in~l ded in the mic~, OCCSSOI 760.
PROCESSING
Preload Users protect their smart card as they protect their credit card, typically by carrying it in theirwallet. Adva lt~~~ , once the card is removed from the S tra ~1' o - '~ r, the tra - . r ~ ~ is no longer .p~ ,P~_ for the payment of tolls.
IIo~ r, the smart card itself continues to be useful for the payment of other goods and services. Indeed, there is c~ -- ~ '7- ~'r marketing appeal for a card, issued by a regional i ~n~ r authority, that can be used for the payment of related highway services such as roadside i 1eE' --- restaurants, gpQo~ e~ and even 10 9~eed ~&tickets.
As illustrated in FIG. 4, a motorist inserts smart card 500 into the transponder 600 sometime before having to make an electronic toll pa~ enL
Typically this occurs when he enters the vehicle if a toll booth is eYpected Upon insertion of the card, the transponder delivers various messages. If the red light 622 15 turns on and a long buzz is heard, the card is not being inserted cc,~ ~. When it is COIl~ inserted, a double beep is heard and the transL ~ then indicates the money ba1ance available on the card. The lights flash to indicate the balance available on the card to the nearest dollar. Every flash of green light 621 means $100, every flash of red light 622 means $10, and every flash of yellow light 623 20 means $1. If the motorist wishes to learn the balance while the card is in the tra~c~ - 600, he simply removes and reinser~s it. When the balance falls below acertain dollar amount, the yellow light will begin flashing. The card should then be taken to the toll authority as soon as possible to credit more money into the card.
The low balance amount is sl~cified at the time of ~ 't~ and can be changed 25 by the toll authority.
Da~a Rr~h l"c - Overview In a!GCQI'd''"''~ with the invention, FIG. 8 provides an overview of the data eY~ ,f between a moving vehicle and toll plaza equipment as the vehicle p og.~i;,ses through an express payment lane. It is assumed that the smart card 30 remains poeitioned within the l.dr-~p~-~d~r during these data exçh~nges Initially, a lO0p sensor provides a signal to the Lane Controller i.,d;~ ~;ng that an on~oming vebicle is within the range of antenna 1. The Plaza Server then causes antenna 1 to transmit an ~livalion signal to the l-allsponder within the moving vehicle. In 11 2~9~
~ ,pOllSe to the activation signal, the transponder transmits data, comprisin~ ~he data frames of FIG. 10 and 11, which have been preloaded into the micluconlloller of the transponder from the smart card. For improved security, the smart card is locked at this time. (Locking means that the first byte of the file within the smart card that S contains its ID number and vehicle class has hey~ cimsl C - ~,t~r FF written into its first byte, and the card cannot be used for a new l~ ;ol until this character is removed). At the same time, the yellow light on the transponder is turned on to indicate that a tr~nc~tion is pending.
When this data is received, the P1aza Server gellerat~s an encryption 10 code which includes an 8-bit random number plus an indin~tion of the time-of-day and day-of-year. This i,lro.n-a~;on is packed into a 128-bit transponder data frame, co ~.pr;~il-g the fixed data frame of FIG. 10 and the variable data frame of FIG. 12, and 11 -- iStPd to the moving vehicle via antenna 1. At the same time the Servereither uses the Card ID number to look up its secret code, or it gelleldt~s the secret 15 code (K) using the Card ID number and a secret ~l~orit~ The secret code, the encryption code, and the money ba1ance of the smart card (when it is used as a debit card) are combined and processed using the DES a1go,i~ l to generate an encrypted number (P') to be coll,p~,d with an encrypted number (P) gw~ldted by the smart card. DES ~I.CI~ iOn pl~cess;ng occurs during the 500 millisecond interva1 20 allocated for transit between antenna 1 and antenna 2. (A brief time interval is required by the present generation smart card, for eY~hqrg g and processing data.
This time interval is such that a vehicle will have moved too far, at maximum speed, to be served by a single antenna.) At the same time still, the Server searches to dct~,.lllinc whether the Card ID is among its list of lost or stolen cards. If it is not, 25 then toll charges are calcu~ In some ~itU~tion~ the toll is a fixed amount, and in other situations the toll depends on the location where the moving vehicle enters a Iimited-access highway. Each toll plaza is progla.l,ll.cd to write its location into the smart card along with the time-of-day that a smart card-equipped vehicle passes through. Thus, whenever the vehicle arrives at the next toll plaza, toll charges can be 30 properly c~ q~d~ Using this data, an acceptance message (such as indicated inFM. 14) is encrypted for transmission to the moving vehicle. Note that this information includes the location of the present toll plaza, the present time-of-day, a black list bit, and the amount to be debited from the card. In the situation where a credit card (rather than a debit card) is used, the transaction amount is stored and 35 used only as a record.
- 12- 20g~065 Antenna 2 transmits the encrypted acceptance message to the Lra~ JoA~de~ of the moving vehicle where this data is dc~,ly~ d and used to debit the card. ~- Jiti - - - 'ly, the smart card is unlocked based on information in the d~ ~p' message. If, for example, the black list bit ld- I ~f ~ that this is a stolen smart card, it S will remain locked. Similarly, if the smart card is 1~ ,d from the transponderbetween antenna 1 and antenna 2 in an attempt to avoid debit charges, the card will remain locked. A ~ c ~ul tlansd~;t .1 cor '~ ~. s with an audible sound ' ~ g same and the yellow light on the llansp~ - ~ is turned off to indicate that the - ~ is ~ p.'.~: .
The motorist is notified of succcs~ful and ~ ,cce--r~l transdclions by the message display at the toll plaza An I ~--cc~ ~-rul transaction would result when the amount of money in the debit card is inadc~udte, the card is lost or stolen, the card is removed from the trLIsponde,- before it completes its llnn-~ ;on to antenna 2, error in data ploce~,:ng, or some other ill~,g~ ily worthy of attention. In 15 these ~ s, the motorist is instructed to pull over to a particular toll booth, but if he does not comply the video camera is activated to record the identity of the vehicle.
Information is eYr~ ,e ~ between the l,.n~ponde. and the SeNer using the p.~d~ t~ ~ .--ined format shown in FIG. 9. This format is used by both the 20 tr~si~nder and the RSR and comprises 128 bits. The transpolld~, data frame includes fixed and variable portions plus a 16-bit cyclic redundancy code (CRC) used to verify the accuracy of ~ on The Fixed Data Frame is shown in FIG.
10 and contains inf.,.. ~io~l supplied by the smart card in the transponder of the vehicle. The first 16 bits of the fixed frame are the used to identify the type of 25 tran~ e - being used, the class of vehicle, and the idenl f e ~ - of the particular smart card. Because improved transponder design is an" ir ~ ~. it is necessary to identify the kind of transponder being used. Further, because different classes of vehicles pay different amounts of toll, it is nccessdl~ to identify vehicle class.
Finally, the l, ~ ss;on of smart card ID enables use of a credit (rather than debit) 30 card and provides i...plO~Cd security against theft and forgery. Indeed, the thrust of the present invention is to improve such security.
Data Exchange - Detailed -13- ~(~9~iQ~j5 When the vehicle first enters the toll pa~l ' ' area, the Plaza Server stimulates the transpondcl - via an ~cli~ on signal transmitted by antenna 1. Data are e ' lg~d between the transpc - ~ and antenna 1 using a modulated 915 MHz cal~ier signal. In response to the a~ tion signal, the tra - L - - ' - initiates a "wake S up" call to the mi.,l~,,r~ssor in the smart card, and the ~ d~ - sends a 128-bit "tra -, ~r~ data frame" to antenna 1. The ~ spondcr data frame comprise~s a fixed frame of 40 bits (see PIG. 10), a variable frame of 72 bits (see PIG. 11), and an error-co~ ing code of 16 bi~s. At this time there is no encryption, and vehicl identification, smart card ide ;t;r~c ~;on and location inf~ r are transmitted in 10 clear text. This inf~ ~ - - is used by the Plaza Server for toll calculation. The location inf~ ~ ~r is generally written into the smart card by Servers located at higL~. a~ entrances and read by Servers located at exits for the c~ la~i~ - of variable tolls.
In ~sp~ ~e to the above transmission, the Server returns a similar 15 tra--spor~er frame to the vehicle, ~- ..v~er the variable data frame tr~ -Q~itt~d is now shown in FIG. 12 and includes a 16-bit time/date number and an 8-bit "random"
number. In the ~! ~f~ cd embodiment of the invention, they cooperate to form an encryption code. The time/date number r~l,.vsc..ls the numbe,f of ten minute increments that have transpired since January 1 of the current year using C1C~ .; ,L
20 Mean r1me. Purther, the "random" number cc ~pri~vs eight bits which provide up to 256 different bit patterns that can be used to encode the data ' - ~g~ between the tra ~pon~er and the Server. The "random" number is periodically changed to foil sc. - ~' who would record such data exc~-n~ - and then replay them to avoid tollpayments. The eL~ code therefore c~ p. ;.~s a predictable portion and a 25 non-p~ '- portion where the p~vc'- 1~'- portions repeat yearly. What this means is that a different en~ tion code is guaranteed every ten minutes of the year, and that within that ten minute period, one of 256 possible codes will be opela~And although next year at the same time, a known portion (time/date number) of the cn~ ion code will be ~F'; d, there is only a small chance (1 in 256) that it will 30 be the same as the previous year. Altv.,-ali~vly, bits 9-72 in FIG. 12 can all be randomly selected for even greater security.
The vehicle ~.ansponde- now has all the nccess~, information to encrypt data for ~-hr~ ission to antenna 2. At this time, the smart card is locked to prevent the possibility of removal before it can be properly debited. If the card is 35 otherwise acce~lab1c, as determin~d by the Server, it is unlocked when antenna 2 - 14- 20~065 ce 1" ~ the debit process. "Locking" means that the smart card cannot be used for any payment until is it returned to the card issuer and I -'or~Pd Loeking also takes place when the eard is i-iPntifif'd as being a lost or stolen eard and a "finder'1 attempts to use it. Briefly, the signifieant information reeeived from antenna 1 during the 5 avti~ ~ - mode is the e.~ r eode whieh, illu;,h~i~ , ineludes the time/date number and the random number eontained in the variable data frame.
Acdvation Pt~ces~
An el~v~ ion ~ -- que that has gained wide a~c~pt - - e is the Data Encryption Standard (DES) and is intended for implementation in special purpose 10 elvvhl -tc deviees. In 1977, the National Bureau of Standards (now NIST) issued DES as a Federal standard, and the National Security Agency has certified new produets using the standard. While a relatively brief d;~c.,~;o~ of the ap~' -- or of DES to the ~ ~ - ~ a is set forth below, a more coml).el e,.~ treatment is set forth in the January 15, 1977 Federal Inf - -- Processing Standards E~llblif Dtion 4615 (FIPS 46), entit1ed "S~ for the Data Eneryption Standard."
DES is a ~ dt~, key scheme in whieh both Cn~ g and decrypting keys are identical and seeret. DES operates on data in bloeks,of 64-bits, sending it through 16 stages of the algorithm before exiting as a 6~bitvipl~f~ F~ ,lion relies heavily on proper management of keys - the strings of ~ that must be20 input to the algo ilh.~.s before f.,n~ pliOn or d~ )lion ean take place. The DES
a1gorithm D enerypts a 64 bit message M into c;~ 1 C - a proeess that is mathematieally stated by the equation C = D(M). The output signal is available in 64-bit-wide binary form for delivery to the destination station.
DES pl~JCccds by rearranging (permuting) a 6~bit message accolding to 25 a known pattern in an oper~ior akin to shuffling cards. The perrnu~d block of 64-bits is now sp1it into two blocks, each co ~ ;ng 32-bits in an operation akin toeutting the eards. At this point, the card shuffling analogy fails because math~ -1 op~r, ~io~ (modulo 2 addition) and cipher function (f) are introduced along with a key K. Values for Kl. . . Kl6 are selected in accord~ -~e with 16 30 different pred~ d - he ' 1~ ~ whereby each K O co~nl,. ;ses an ordered ~t of 48-bits ehosen from the 64-bit key. Cipher function (f) denotes an opera~iorl f(M, K) in which a portion (32 bits) of the message M is modulo-2 combined with a portion (48 bits~ of the key K certain pred~ d bits are disc~ded from the resulting combination so that only 32 bits remain. Cipher function (f) is performed 16 times using different portions of M and K.
Transac~ion Processing Although DES is used in the preferred embodiment of the invention, other ~nc~ ion algorithms are possible. Applying DES to the present ~ve~llion S entai1s using the last 64 bits (bits 9-72) of the variable data frame (i.e., the encryption code) as the message M, and a 64-bit secret code as the key K. Note that a secret code is stored in the memory of each smart card. In the preferred embodiment of the invention, the secret code is different for each smart card although such 1lniqoenPss is not required. The secret code is known to the Plaza Server through a look-up table 10 that associates the Card ID with the secret code. Alternatively, the Plaza Server can derive the secret code from the Card ID using a secret algorithm, and thereby avoid having to store the secret code for each smart card.
Reference is now made to FIG. 13 which shows the variable data frame ~mn~ d from the vehicle to antenna 2. Included in this data frame are bits 9-24 15 which is the time/date inforrn~tion just i - nitted by antenna 1, bits 33-48 which ~epr~,senl the money balance rem~ining in the smart card when used as a debit card, and bits 65-72 which is the random number just ~ s~ d by~antenna 1. Bits 9-72 of the variable data frame correspond to message M and are encrypted by the .,.iclupl~essor in the smart card according to the DES algorithm. The secret code 20 stored in the memory of the smart card is used as the key R during DES encryption.
Such e.~ Jtion provides the advantage that if the entire l".n~ icsion (vehicle to antenna 1 and vehicle to antenna 2) is recorded by electronic eavesd.opp~g, it can only be fr~nd-11Pnt1y rebroadcast by another vehicle for the next ten minutes at most.
In the preferred embodiment, however, the Plaza Server changes the random number25 for each new vehicle, and fraudulent rebro~dc~ting of h.le..;epled information is virtually çlir~
FIG. 14 discloses the variable data frame tr~nsmittçd from antenna 2 to the vehicle which completes the transaction. As in~ ed above, the present location and time-of-day are transmitted for storage in the smart card memory. Such 30 information is most useful when it idçntifiPs the entrance location of a limited access highway. Also tr~n~mitted is a repeat of the money balance of the card and the transaction amount to be debited. In the case where the smart card is a debit card, the~transaction amount is used to decrease its money balance; and in the case where the smart card is a credit card, the transaction amount is merely stored as an -16- ~t~a65 ele~,hvnic receipt. Jn either event, this message is known as the ac~ ep~ - ,e message and it includes a "Black List Bit" and a "Grey List Bit" which are used to keep the smart card locked when the Plaza Server d~ t~ r 5 that further use of the smar~
card is ' lp~ It is finally noted that this ~~ep~ - ~ message is encrypted S using the same encryption code (random number and timeldate number) to enhance system ~curity.
Although a particular embodiment has been shown and des~ ~ ikA it is 1~ de- ~ ~ood that various modifications can be made within thie spirit and scope of the invention. These modifications include, but are not 1imited to, the use of enicryption 10 a1gori*ms other than DES having greater or lesser security; building thie smart card function into the i ~spc - d~ ~ unit in a non-portable manner; the use of other predictable or non-predictable numbers as the ~ lc ~plion code; the u~ of dilre.. ~
data ;~tl~.,h.~,s within the tra~ ,~ndcr data frame; and the use of a single antenna at thie toll plaza to communicate with the moving vehicle.
.~' - . ' , ' , .
- : .
Claims (20)
1. In a toll collecting system comprising a first transceiver which is located in a moving vehicle and a second transceiver which is located at a relatively fixed location on a roadway, a secure method for collecting tolls from the moving vehicle comprising the steps of:
generating an encryption code at the second transceiver;
transmitting the encryption code to the first transceiver;
storing payment information and a predetermined encryption algorithm in the first transceiver;
encrypting the payment information, using the encryption code, in accordance with the predetermined algorithm;
transmitting the encrypted payment information to the second transceiver; and verifying the encrypted payment information at the second transceiver.
generating an encryption code at the second transceiver;
transmitting the encryption code to the first transceiver;
storing payment information and a predetermined encryption algorithm in the first transceiver;
encrypting the payment information, using the encryption code, in accordance with the predetermined algorithm;
transmitting the encrypted payment information to the second transceiver; and verifying the encrypted payment information at the second transceiver.
2. The method of claim 1 further including the steps of:
encrypting an acceptance message at the second transceiver; and transmitting the encrypted acceptance message to the first transceiver.
encrypting an acceptance message at the second transceiver; and transmitting the encrypted acceptance message to the first transceiver.
3. The method of claim 2 wherein the first transceiver includes a removable debit card which stores a money balance available for making payments,the method further including the following steps that take place at the first transceiver:
locking the debit card while data is being exchanged with the second transceiver; and unlocking the debit card in response to the encrypted acceptance message from the second transceiver.
locking the debit card while data is being exchanged with the second transceiver; and unlocking the debit card in response to the encrypted acceptance message from the second transceiver.
4. The method of claim 1 wherein the encryption code includes a sequence of digits which changes in an unpredictable manner.
5. The method of claim 1 wherein the encryption code comprises a sequence of digits which changes in a predictable manner.
6. The method of claim 5 wherein the sequence of digits comprises an indication of the time-of-day and/or day-of-year.
7. The method of claim 1 wherein the encryption code comprises a first sequence of digits which changes in a random manner, and a second sequence of digits which changes in a non-random manner.
8. The method of claim 1 wherein the predetermined encryption algorithm comprises the Data Encryption Standard.
9. The method of claim 1 wherein the second transceiver comprises a pair of spaced-apart antennas and a computer for controlling same, said antennasbeing sequentially positioned along a payment lane of the roadway.
10. The method of claim 1 wherein the first transceiver comprises a transponder unit and a smart card which is inserted therein; the smart card storing the payment information and the encryption algorithm.
11. The method of claim 10 wherein the payment information includes a secret code that is associated with the smart card and is known to the second transceiver.
12. The method of claim 11 wherein the payment information further includes a money balance which is reduced by making toll payments.
13. In a toll collecting system comprising a first transceiver which is located in a moving vehicle and a second transceiver which is located at a relatively fixed location on a roadway, a secure method for collecting tolls from the moving vehicle comprising the steps of:
generating an encryption code at the second transceiver;
transmitting the encryption code to the first transceiver;
storing a predetermined algorithm in the first transceiver;
encrypting the encryption code in accordance with the predetermined algorithm;
transmitting the encrypted encryption code to the second transceiver;
and verifying the encrypted encryption code at the second transceiver.
generating an encryption code at the second transceiver;
transmitting the encryption code to the first transceiver;
storing a predetermined algorithm in the first transceiver;
encrypting the encryption code in accordance with the predetermined algorithm;
transmitting the encrypted encryption code to the second transceiver;
and verifying the encrypted encryption code at the second transceiver.
14. The method of claim 13 wherein the encryption code comprises a sequence of digits which changes in an unpredictable manner.
15. The method of claim 13 wherein the encryption code comprises a sequence of digits which changes in a predictable manner.
16. In a system for making payments to payment collecting apparatus from a distance in a secure manner, the combination of a transponder unit and a smart card the transponder unit comprising:
means for receiving and demodulating a first radio frequency (RF) signal to recover an encryption code transmitted by the payment collecting apparatus;
means for delivering the encryption code to the smart card;
means for receiving an encrypted encryption code from the smart card;
means responsive to the encrypted encryption code for generating and transmitting a second RF signal to the payment collecting apparatus;
the smart card comprising:
means for receiving the encryption code from the transponder unit;
means storing a predetermined algorithm and a secret code associated with the smart card;
means responsive to the secret code for encrypting the encryption code in accordance with the predetermined algorithm; and means for delivering the encrypted encryption code to the transponder unit.
means for receiving and demodulating a first radio frequency (RF) signal to recover an encryption code transmitted by the payment collecting apparatus;
means for delivering the encryption code to the smart card;
means for receiving an encrypted encryption code from the smart card;
means responsive to the encrypted encryption code for generating and transmitting a second RF signal to the payment collecting apparatus;
the smart card comprising:
means for receiving the encryption code from the transponder unit;
means storing a predetermined algorithm and a secret code associated with the smart card;
means responsive to the secret code for encrypting the encryption code in accordance with the predetermined algorithm; and means for delivering the encrypted encryption code to the transponder unit.
17. The system of claim 16 wherein the smart card is a debit card which further includes means for decreasing a money balance stored in the card in response to a third RF signal that is transmitted by the payment collecting apparatus andreceived by the transponder unit.
18. The system of claim 16 wherein the predetermined algorithm comprises the Data Encryption Standard.
19. A secure toll collection system for moving vehicles including roadside communication apparatus and vehicle-mounted apparatus for transmitting/receiving radio frequency signals to/from each other, the roadside communication apparatus comprising:
a first antenna for transmitting an encryption code to the moving vehicle;
a second antenna, spaced apart from the first antenna, for receiving encrypted payment information from the moving vehicle;
data processing means, communicatively connected to the first and second spaced-apart antennas, for periodically changing the encryption code and for verifying the authenticity of the encrypted payment information, the vehicle-mounted apparatus comprising:
means for storing payment information, a secret code, and a predetermined algorithm;
means for encrypting the payment information in accordance with the predetermined algorithm and the encryption code; and means for transmitting the encrypted payment information to the second antenna.
a first antenna for transmitting an encryption code to the moving vehicle;
a second antenna, spaced apart from the first antenna, for receiving encrypted payment information from the moving vehicle;
data processing means, communicatively connected to the first and second spaced-apart antennas, for periodically changing the encryption code and for verifying the authenticity of the encrypted payment information, the vehicle-mounted apparatus comprising:
means for storing payment information, a secret code, and a predetermined algorithm;
means for encrypting the payment information in accordance with the predetermined algorithm and the encryption code; and means for transmitting the encrypted payment information to the second antenna.
20. The secure toll collecting system of claim 19 wherein the vehicle-mounted apparatus comprises a transponder unit and a smart card.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US07/908,195 US5310999A (en) | 1992-07-02 | 1992-07-02 | Secure toll collection system for moving vehicles |
| US908,195 | 1992-07-02 |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CA2095065A1 CA2095065A1 (en) | 1994-01-03 |
| CA2095065C true CA2095065C (en) | 1999-01-12 |
Family
ID=25425350
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA002095065A Expired - Fee Related CA2095065C (en) | 1992-07-02 | 1993-04-28 | Secure toll collection system for moving vehicles |
Country Status (5)
| Country | Link |
|---|---|
| US (1) | US5310999A (en) |
| EP (1) | EP0577328B1 (en) |
| JP (1) | JP2837612B2 (en) |
| CA (1) | CA2095065C (en) |
| DE (1) | DE69321166T2 (en) |
Families Citing this family (237)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5805082A (en) * | 1990-05-17 | 1998-09-08 | At/Comm Incorporated | Electronic vehicle toll collection system and method |
| US6653946B1 (en) | 1990-05-17 | 2003-11-25 | Transcore, Inc. | Electronic vehicle toll collection system and method |
| JP2543235B2 (en) * | 1990-06-29 | 1996-10-16 | 松下電器産業株式会社 | IC card adapter |
| CA2113805C (en) * | 1991-07-17 | 2001-06-05 | John W. Halpern | Pocketsize electronic travel and commuter pass and a plurality of accounting systems. |
| US7028187B1 (en) * | 1991-11-15 | 2006-04-11 | Citibank, N.A. | Electronic transaction apparatus for electronic commerce |
| JP2808513B2 (en) * | 1993-02-19 | 1998-10-08 | 三菱重工業株式会社 | Electronic toll collection system |
| DE4310099C2 (en) * | 1993-03-23 | 1997-09-04 | Mannesmann Ag | Path identification device |
| GB9306805D0 (en) * | 1993-04-01 | 1993-05-26 | Jonhig Ltd | Smart card reader |
| FR2707408B1 (en) * | 1993-07-09 | 1995-08-18 | Cga Hbs | Method for the fast and secure transmission of data contained in a smart card during a remote transaction. |
| US5430447A (en) * | 1993-08-23 | 1995-07-04 | Texas Instruments Deutschland Gmbh | Protection against manipulation of batteryless read/write transponders |
| US5485520A (en) * | 1993-10-07 | 1996-01-16 | Amtech Corporation | Automatic real-time highway toll collection from moving vehicles |
| US5673034A (en) * | 1993-10-12 | 1997-09-30 | Saliga; Thomas V. | Security system comprising three apparatuses sharing a time-varying code |
| US5451758A (en) * | 1993-12-08 | 1995-09-19 | Jesadanont; Mongkol | Automatic non-computer network no-stop collection of expressway tolls by magnetic cards and method |
| IT1269422B (en) * | 1994-01-11 | 1997-04-01 | Alfi Srl | Process for producing devices for identification of authenticity for the use of services in general, guaranteed without recourse to the manufacturer of the device to provide assurance of its validity, and device produced |
| GB9401924D0 (en) * | 1994-02-01 | 1994-03-30 | Jonhig Ltd | System for road toll payment |
| US5473233A (en) * | 1994-03-08 | 1995-12-05 | Stull; Mark A. | Electromagnetically propelled high-speed high-capacity transportation system for short-distance travel in urban and suburban areas |
| JP3552171B2 (en) * | 1994-06-21 | 2004-08-11 | 富士通株式会社 | Automatic charge settlement system and storage medium with wireless communication function for the system, frequency conversion device for the system, writing device for the system, settlement device for the system, payment device for the system, and inquiry device for the system |
| DE4425271A1 (en) * | 1994-07-18 | 1996-01-25 | Sel Alcatel Ag | Method and device arrangement for secure, anonymous payment transactions |
| US5629981A (en) * | 1994-07-29 | 1997-05-13 | Texas Instruments Incorporated | Information management and security system |
| JP3243941B2 (en) * | 1994-08-05 | 2002-01-07 | トヨタ自動車株式会社 | In-vehicle device for automatic fee payment device |
| US5490079A (en) * | 1994-08-19 | 1996-02-06 | Texas Instruments Incorporated | System for automated toll collection assisted by GPS technology |
| AU3137695A (en) * | 1994-09-01 | 1996-03-22 | At/Comm Incorporated | Systems and methods for automated toll collection enforcement |
| KR970705807A (en) * | 1994-09-01 | 1997-10-09 | 리차드 제이. 하리슨 | ELECTRONIC VEHICLE TOLL COLLECTION SYSTEM AND METHOD |
| US5459304A (en) | 1994-09-13 | 1995-10-17 | At&T Ipm Corp. | Smart card techniques for motor vehicle record administration |
| SE515521C2 (en) * | 1994-10-11 | 2001-08-20 | Combitech Traffic System Ab | Method and apparatus for radio communication between mutually moving objects |
| JP3571383B2 (en) * | 1994-10-19 | 2004-09-29 | 株式会社日立製作所 | IC card, IC card read / write device and electronic wallet system |
| GB2294795A (en) * | 1994-11-01 | 1996-05-08 | William Munro Groves Paterson | Road use charging system |
| JP2947118B2 (en) * | 1994-11-02 | 1999-09-13 | トヨタ自動車株式会社 | Mobile communication method |
| DE4446644A1 (en) * | 1994-12-19 | 1996-06-20 | Teledrive Telematik Im Verkehr | Automatic access monitoring system e.g. for vehicle travel on certain roads and areas |
| DE4446649A1 (en) * | 1994-12-19 | 1996-06-20 | Teledrive Telematik Im Verkehr | Appts. for automatically charging rates for use of traffic place in moving vehicle |
| DE4446674A1 (en) * | 1994-12-19 | 1996-06-20 | Teledrive Telematik Im Verkehr | Control system for automatic control of approach of vehicles to toll barrier e.g. parking place or tunnel |
| BE1009253A3 (en) * | 1995-03-31 | 1997-01-07 | Banksys | Process and device for payment without cash |
| US6725202B1 (en) * | 1995-04-10 | 2004-04-20 | Texas Instruments Incorporated | Transaction accounting of toll transactions in transponder systems |
| US6317721B1 (en) | 1995-04-10 | 2001-11-13 | Texas Instruments Incorporated | Transaction accounting of toll transactions in transponder systems |
| US5602919A (en) * | 1995-04-10 | 1997-02-11 | Texas Instruments Incorporated | Speedup for monetary transactions using a transponder in conjunction with a smartcard |
| JPH11505945A (en) * | 1995-05-30 | 1999-05-25 | コンビテック トラフィック システムズ アクチェボラグ | Vehicle-mounted device and system for telecommunications in establishments |
| US5644119A (en) * | 1995-06-05 | 1997-07-01 | Shell Oil Company | Customer interface for driver |
| US5661804A (en) * | 1995-06-27 | 1997-08-26 | Prince Corporation | Trainable transceiver capable of learning variable codes |
| JP3141734B2 (en) * | 1995-07-19 | 2001-03-05 | トヨタ自動車株式会社 | Roadside vehicle communication equipment |
| EP0762333A1 (en) * | 1995-08-14 | 1997-03-12 | Texas Instruments Incorporated | Method and system for calculating a user account balance in a recognition system |
| EP0789896A1 (en) * | 1995-09-05 | 1997-08-20 | Koninklijke Philips Electronics N.V. | Toll system |
| JP3156562B2 (en) | 1995-10-19 | 2001-04-16 | 株式会社デンソー | Vehicle communication device and traveling vehicle monitoring system |
| JP3132369B2 (en) * | 1995-11-02 | 2001-02-05 | トヨタ自動車株式会社 | Roadside-vehicle communication vehicle-mounted device and roadside-vehicle communication device |
| CH689881A8 (en) * | 1995-12-13 | 2000-02-29 | Bauer Eric | Concurrent access management method and device for its implementation. |
| SE515611C2 (en) * | 1995-12-18 | 2001-09-10 | Combitech Traffic Syst Ab | Device for data transmission by radio communication |
| EP0780802A3 (en) | 1995-12-19 | 1999-08-18 | AT&T Corp. | Wireless billing system |
| AU1432697A (en) * | 1995-12-19 | 1997-07-14 | Gzs Gesellschaft Fur Zahlungssysteme Mbh | Methods and devices for using and putting to account electronic means of payment in an open, interoperable system for automatic levying of charges |
| US7640185B1 (en) | 1995-12-29 | 2009-12-29 | Dresser, Inc. | Dispensing system and method with radio frequency customer identification |
| DE19606552B4 (en) * | 1996-02-22 | 2008-04-10 | Robert Bosch Gmbh | Method for providing data of a vehicle device |
| US5902985A (en) * | 1996-03-21 | 1999-05-11 | Shell Oil Company | Providing service to a vehicle |
| DE69724686T2 (en) * | 1996-03-28 | 2004-07-08 | Denso Corp., Kariya | Automatic toll collection system and a unit installed in the vehicle and used in an automatic toll collection system |
| FR2746926B1 (en) * | 1996-03-28 | 1998-06-12 | Lorenceau Etienne | ELECTRONIC ELECTROMAGNETIC INTERFERENCE DETECTION DEVICE, PARTICULARLY FOR A MOTOR VEHICLE TRANSPONDER |
| US6010074A (en) * | 1996-04-01 | 2000-01-04 | Cubic Corporation | Contactless proximity automated data collection system and method with collision resolution |
| US6097292A (en) * | 1997-04-01 | 2000-08-01 | Cubic Corporation | Contactless proximity automated data collection system and method |
| US5825007A (en) * | 1996-05-06 | 1998-10-20 | Jesadanont; Mongkol | Automatic non-computer network no-stop collection of expressway tolls by prepaid cards and method: pay according to category of vehicle and the distance it travels |
| DE19624602C2 (en) * | 1996-06-20 | 1998-04-09 | Bosch Gmbh Robert | Procedure for carrying out a booking process |
| US5819234A (en) * | 1996-07-29 | 1998-10-06 | The Chase Manhattan Bank | Toll collection system |
| JP3555345B2 (en) * | 1996-08-09 | 2004-08-18 | 株式会社日立製作所 | In-vehicle device of automatic toll collection system |
| US5809142A (en) * | 1996-08-14 | 1998-09-15 | Texas Instruments Incorporated | Method and system for calculating a user account balance in a recognition system |
| US5991749A (en) * | 1996-09-11 | 1999-11-23 | Morrill, Jr.; Paul H. | Wireless telephony for collecting tolls, conducting financial transactions, and authorizing other activities |
| SE9603788L (en) * | 1996-10-14 | 1998-04-15 | Combitech Traffic Syst Ab | Vehicle radio communication unit |
| US5818021A (en) * | 1996-12-03 | 1998-10-06 | Szewczykowski; Jerzy | Method for identifying counterfeit negotiable instruments |
| US6169789B1 (en) * | 1996-12-16 | 2001-01-02 | Sanjay K. Rao | Intelligent keyboard system |
| GB9626836D0 (en) * | 1996-12-24 | 1997-02-12 | Ncr Int Inc | Self service terminal |
| US6130623A (en) * | 1996-12-31 | 2000-10-10 | Lucent Technologies Inc. | Encryption for modulated backscatter systems |
| US5933096A (en) * | 1997-01-17 | 1999-08-03 | Mitsubishi Denki Kabushiki Kaisha | Non-stop automatic toll collection system |
| WO1998034198A1 (en) | 1997-01-31 | 1998-08-06 | Toyota Jidosha Kabushiki Kaisha | Communication equipment to be carried on vehicle and interroad communication equipment |
| ES2121558B1 (en) * | 1997-04-11 | 1999-10-01 | Autopistas Concesionaria Espan | AUTOMATIC TOLL STATION FOR HIGHWAYS. |
| DE69821545T2 (en) * | 1997-05-13 | 2004-12-23 | Hitachi, Ltd. | Electronic cash card, electronic money receiving / withdrawing machine and electronic cash card editing device |
| US5955970A (en) * | 1997-05-19 | 1999-09-21 | Denso Corporation | On-board electronic device for use in electronic toll collection system |
| US7221256B2 (en) * | 1997-05-20 | 2007-05-22 | Johnson Controls Technology Company | Trainable transceiver |
| US6085976A (en) * | 1998-05-22 | 2000-07-11 | Sehr; Richard P. | Travel system and methods utilizing multi-application passenger cards |
| US6910628B1 (en) * | 1997-06-24 | 2005-06-28 | Richard P. Sehr | Travel system and methods utilizing multi-application airline passenger cards |
| JP3430866B2 (en) * | 1997-07-16 | 2003-07-28 | 株式会社デンソー | Power-down compatible device |
| KR100284257B1 (en) * | 1997-08-31 | 2001-03-02 | 윤종용 | Automatic starting device of electronic toll collection system |
| JPH11120396A (en) * | 1997-10-17 | 1999-04-30 | Nec Corp | Device and method for deciding communicating vehicle |
| US6041410A (en) † | 1997-12-22 | 2000-03-21 | Trw Inc. | Personal identification fob |
| SE510081C2 (en) * | 1998-01-19 | 1999-04-19 | Combitech Traffic Syst Ab | Transmitter and receiver equipment preferably for placement in vehicles |
| EP0939514A3 (en) * | 1998-02-25 | 2001-02-07 | Matsushita Electric Industrial Co., Ltd. | Device authentication and encrypted communication system offering increased security |
| JP3587973B2 (en) * | 1998-03-04 | 2004-11-10 | 沖電気工業株式会社 | IC card and transaction processing method thereof |
| US6474544B2 (en) | 1998-03-23 | 2002-11-05 | Sun Microsystems, Inc. | Electronic vault for use in processing smart product transactions |
| US6609656B1 (en) * | 1998-03-27 | 2003-08-26 | Micron Technology, Inc. | Method and system for identifying lost or stolen devices |
| US6693517B2 (en) | 2000-04-21 | 2004-02-17 | Donnelly Corporation | Vehicle mirror assembly communicating wirelessly with vehicle accessories and occupants |
| US6420975B1 (en) | 1999-08-25 | 2002-07-16 | Donnelly Corporation | Interior rearview mirror sound processing system |
| US6158655A (en) * | 1998-04-08 | 2000-12-12 | Donnelly Corporation | Vehicle mounted remote transaction interface system |
| US6247644B1 (en) * | 1998-04-28 | 2001-06-19 | Axis Ab | Self actuating network smart card device |
| DE19823532C2 (en) * | 1998-05-26 | 2003-08-21 | T Mobile Deutschland Gmbh | Method for controlling a subscriber identity module (SIM) in mobile radio systems |
| DE19823708A1 (en) * | 1998-05-27 | 1999-12-02 | Bayerische Motoren Werke Ag | Identification device for the user of a vehicle |
| US6366222B1 (en) * | 1998-05-28 | 2002-04-02 | Edward L. Russell, Jr. | Able to operate tag |
| JP3782242B2 (en) * | 1998-08-28 | 2006-06-07 | 株式会社東芝 | Toll collection system, in-vehicle device and toll collection method |
| JP3213282B2 (en) * | 1998-09-16 | 2001-10-02 | 松下電器産業株式会社 | Automatic toll collection system for toll roads |
| JP3091443B2 (en) * | 1998-10-13 | 2000-09-25 | 松下電器産業株式会社 | On-board equipment for toll collection facilities |
| WO2000029965A1 (en) * | 1998-11-16 | 2000-05-25 | Saison Information Systems Co., Ltd. | Method and apparatus for network authentication |
| WO2000031691A1 (en) * | 1998-11-23 | 2000-06-02 | Swisscom Mobile Ag | Method and device for detecting, charging for and blocking services |
| US6390374B1 (en) * | 1999-01-15 | 2002-05-21 | Todd Carper | System and method for installing/de-installing an application on a smart card |
| US6338435B1 (en) * | 1999-01-15 | 2002-01-15 | Todd Carper | Smart card patch manager |
| US6263316B1 (en) * | 1999-02-02 | 2001-07-17 | Momente, Llc | Automated process for retailing to a vehicle occupant |
| JP3069341B1 (en) * | 1999-02-10 | 2000-07-24 | 松下電器産業株式会社 | Toll collection system |
| US6127938A (en) * | 1999-02-12 | 2000-10-03 | Privacy Shield L.L.C. | Adjustable shield for vehicle mounted toll collection identifier |
| NL1011298C2 (en) * | 1999-02-12 | 2000-08-15 | Amb It Holding | Transfer system between moving objects and fixed stations. |
| US8538801B2 (en) * | 1999-02-19 | 2013-09-17 | Exxonmobile Research & Engineering Company | System and method for processing financial transactions |
| US7034660B2 (en) * | 1999-02-26 | 2006-04-25 | Sri International | Sensor devices for structural health monitoring |
| GB9906037D0 (en) * | 1999-03-16 | 1999-05-12 | Searcher Limited | Tagging system and method |
| JP2001036545A (en) * | 1999-05-17 | 2001-02-09 | Sony Corp | Information processing unit, its method, information processing system and medium |
| US6577229B1 (en) * | 1999-06-10 | 2003-06-10 | Cubic Corporation | Multiple protocol smart card communication device |
| US7054832B1 (en) | 1999-06-24 | 2006-05-30 | Rajesh Vallabh | System for merchandize transactions |
| WO2001013338A1 (en) * | 1999-08-11 | 2001-02-22 | Mark Iv Industries Limited | Method and means for rf toll collection |
| US6363239B1 (en) * | 1999-08-11 | 2002-03-26 | Eastman Kodak Company | Print having attached audio data storage and method of providing same |
| JP2001067504A (en) * | 1999-08-30 | 2001-03-16 | Toshiba Corp | Toll collection system, portable terminal, and method for maintenance test of toll collection system |
| WO2001016865A1 (en) * | 1999-08-31 | 2001-03-08 | Cryptec Systems, Inc. | System and method for installing/de-installing an application on a smart card |
| JP2001076198A (en) * | 1999-09-07 | 2001-03-23 | Hitachi Ltd | Passing vehicle time management system |
| US7143049B2 (en) * | 1999-09-10 | 2006-11-28 | Siemens Vdo Automotive Ag | Method and system for registering tickets |
| AU5759699A (en) * | 1999-09-22 | 2001-04-24 | Keiichi Nakajima | Electronic settlement system, settlement device, and terminal |
| US6876991B1 (en) | 1999-11-08 | 2005-04-05 | Collaborative Decision Platforms, Llc. | System, method and computer program product for a collaborative decision platform |
| US6785739B1 (en) | 2000-02-23 | 2004-08-31 | Eastman Kodak Company | Data storage and retrieval playback apparatus for a still image receiver |
| US7259654B2 (en) * | 2000-02-28 | 2007-08-21 | Magellan Technology Pty Limited | Radio frequency identification transponder |
| US7248145B2 (en) * | 2000-02-28 | 2007-07-24 | Magellan Technology Oty Limited | Radio frequency identification transponder |
| IL151258A0 (en) * | 2000-03-15 | 2003-04-10 | Raytheon Co | Predictive automatic road-incident detection using automatic vehicle identification |
| CA2307361C (en) * | 2000-05-01 | 2008-04-08 | Mark Iv Industries Limited | Multiple protocol transponder |
| US6668216B2 (en) | 2000-05-19 | 2003-12-23 | Tc (Bermuda) License, Ltd. | Method, apparatus and system for wireless data collection and communication for interconnected mobile systems, such as for railways |
| US6609655B1 (en) * | 2000-06-26 | 2003-08-26 | Martha F. Harrell | Smart card system for providing financial, travel, and entertainment-related services |
| US7058814B1 (en) | 2000-09-28 | 2006-06-06 | International Business Machines Corporation | System and method for providing time-limited access to people, objects and services |
| WO2002071202A1 (en) * | 2000-10-31 | 2002-09-12 | Motorola, Inc. | Method, system and apparatus for hazard warning |
| US6708086B2 (en) | 2000-12-11 | 2004-03-16 | Sue M. Richard | Vehicle computer |
| US7565307B1 (en) * | 2000-12-21 | 2009-07-21 | Tc License Ltd. | Automatic payment method using RF ID tags |
| HU228601B1 (en) * | 2001-01-26 | 2013-04-29 | Raytheon Co | System and method for reading license plates |
| US6344806B1 (en) | 2001-02-15 | 2002-02-05 | Yoram Katz | Parking status control system and method |
| US6559776B2 (en) | 2001-02-15 | 2003-05-06 | Yoram Katz | Parking status control system and method |
| US6761316B2 (en) * | 2001-03-27 | 2004-07-13 | Symbol Technologies, Inc. | Compact auto ID reader and radio frequency transceiver data collection module |
| KR20020085089A (en) * | 2001-05-04 | 2002-11-16 | 삼성에스디에스 주식회사 | Method of Electronic Toll Collection System security |
| KR100792963B1 (en) * | 2001-05-17 | 2008-01-08 | 엘지전자 주식회사 | Method of Smart-card Information Cognition for Electronic Toll Collection System |
| AUPR594701A0 (en) * | 2001-06-27 | 2001-07-19 | Transurban City Link Limited | Tolling information exchange method and system |
| US20030004934A1 (en) * | 2001-06-29 | 2003-01-02 | Richard Qian | Creating and managing portable user preferences for personalizion of media consumption from device to device |
| US20030030542A1 (en) * | 2001-08-10 | 2003-02-13 | Von Hoffmann Gerard | PDA security system |
| JP2003077072A (en) * | 2001-08-31 | 2003-03-14 | Tsubasa System Co Ltd | Antitheft system |
| US20030074209A1 (en) * | 2001-10-15 | 2003-04-17 | Tobin Christopher M. | User device with service finding and purchasing functionality |
| US7764197B2 (en) | 2001-10-17 | 2010-07-27 | United Toll Systems, Inc. | System and synchronization process for inductive loops in a multilane environment |
| US7725348B1 (en) | 2001-10-17 | 2010-05-25 | United Toll Systems, Inc. | Multilane vehicle information capture system |
| US8331621B1 (en) | 2001-10-17 | 2012-12-11 | United Toll Systems, Inc. | Vehicle image capture system |
| US7136828B1 (en) * | 2001-10-17 | 2006-11-14 | Jim Allen | Intelligent vehicle identification system |
| CN2519537Y (en) * | 2001-12-07 | 2002-10-30 | 丁玲虹 | Active induction entrance guard device |
| US6958676B1 (en) * | 2002-02-06 | 2005-10-25 | Sts International Ltd | Vehicle passenger authorization system |
| US6663063B2 (en) * | 2002-03-18 | 2003-12-16 | Andrew Tatta | Device and method for supporting an electronic toll pass assembly against the windshield of a vehicle |
| US20040079847A1 (en) * | 2002-03-18 | 2004-04-29 | Andrew Tatta | Mounting device and method for attaching an electronic toll pass assembly to a vehicle windshield |
| JP2003304190A (en) * | 2002-04-12 | 2003-10-24 | Mitsubishi Electric Corp | On-vehicle device for narrow area communication system |
| US6970082B2 (en) * | 2002-07-29 | 2005-11-29 | Johnson Controls Technology Company | System and method of communicating home security data between a vehicle and a home |
| US7026918B2 (en) * | 2002-08-26 | 2006-04-11 | David Douglas Briick | Motor vehicle verification and control system |
| JP3768939B2 (en) * | 2002-09-05 | 2006-04-19 | 株式会社東芝 | Card processing system and card processing method |
| US20040049733A1 (en) * | 2002-09-09 | 2004-03-11 | Eastman Kodak Company | Virtual annotation of a recording on an archival media |
| AT414281B (en) * | 2002-09-12 | 2006-11-15 | Siemens Ag Oesterreich | PROCEDURE FOR DETERMINING THE ACCESS OF AT LEAST ONE MAJOR ROAD SECTION |
| US20040052471A1 (en) * | 2002-09-13 | 2004-03-18 | Fitel Usa Corp. | Connector systems for dynamically updating information related to a network and methods for developing the connector systems |
| US7233498B2 (en) | 2002-09-27 | 2007-06-19 | Eastman Kodak Company | Medium having data storage and communication capabilities and method for forming same |
| US20040083130A1 (en) * | 2002-10-03 | 2004-04-29 | Arthur Posner | Electronic toll collection system and method for rental and leased vehicles |
| US7076083B2 (en) * | 2002-12-12 | 2006-07-11 | Eastman Kodak Company | Personnel access control system |
| JP2004246563A (en) * | 2003-02-13 | 2004-09-02 | Matsushita Electric Ind Co Ltd | Receipt issuing device |
| US20040227616A1 (en) * | 2003-05-16 | 2004-11-18 | Mark Iv Industries Limited | Handheld reader and method of testing transponders using same |
| US6705521B1 (en) * | 2003-05-23 | 2004-03-16 | Chunghwa Telecom Co., Ltd. | Automatic car toll computing and charging method |
| SG120098A1 (en) * | 2003-05-26 | 2006-03-28 | Chunghwa Telecom Co Ltd | Automatic car toll computing and charging method |
| US20040263356A1 (en) * | 2003-06-27 | 2004-12-30 | Quen-Zong Wu | Automatic car toll paying method |
| US20050001712A1 (en) * | 2003-07-03 | 2005-01-06 | Yarbrough Craig D. | RF ID tag |
| US20050036620A1 (en) * | 2003-07-23 | 2005-02-17 | Casden Martin S. | Encryption of radio frequency identification tags |
| US7331522B2 (en) * | 2003-08-07 | 2008-02-19 | Cubic Corporation | Virtual gate system |
| US7336203B2 (en) * | 2003-09-24 | 2008-02-26 | Border Gateways Inc. | Traffic control system and method for use in international border zones |
| US7109986B2 (en) * | 2003-11-19 | 2006-09-19 | Eastman Kodak Company | Illumination apparatus |
| US7145464B2 (en) * | 2003-11-19 | 2006-12-05 | Eastman Kodak Company | Data collection device |
| US7009494B2 (en) * | 2003-11-21 | 2006-03-07 | Eastman Kodak Company | Media holder having communication capabilities |
| US7427024B1 (en) | 2003-12-17 | 2008-09-23 | Gazdzinski Mark J | Chattel management apparatus and methods |
| US20050224313A1 (en) * | 2004-01-26 | 2005-10-13 | Cubic Corporation | Robust noncontact media processor |
| US20050237154A1 (en) * | 2004-04-04 | 2005-10-27 | Telematics Wireless Ltd. | Method and system for monitoring electronic sealing of containers |
| CA2566237C (en) * | 2004-05-10 | 2015-11-03 | Rent A Toll, Ltd. | Toll fee system and method |
| US7512236B1 (en) | 2004-08-06 | 2009-03-31 | Mark Iv Industries Corporation | System and method for secure mobile commerce |
| US7545287B2 (en) * | 2004-08-31 | 2009-06-09 | Raytheon Company | Enforcement transponder |
| US8035482B2 (en) * | 2004-09-07 | 2011-10-11 | Eastman Kodak Company | System for updating a content bearing medium |
| US7233260B2 (en) * | 2004-10-05 | 2007-06-19 | Mark Iv Industries Corp. | Electronic toll collection system |
| EP1807795A1 (en) * | 2004-10-13 | 2007-07-18 | Robert Lane | Registration system |
| US7262711B2 (en) * | 2004-10-20 | 2007-08-28 | Mark Iv Industries Corp. | External indicator for electronic toll communications |
| US8049594B1 (en) | 2004-11-30 | 2011-11-01 | Xatra Fund Mx, Llc | Enhanced RFID instrument security |
| IL165700A (en) * | 2004-12-09 | 2010-11-30 | Telematics Wireless Ltd | Toll transponder with deactivation means |
| US20060176153A1 (en) * | 2005-02-09 | 2006-08-10 | Wai-Cheung Tang | RF transponder with electromechanical power |
| US20060220794A1 (en) * | 2005-04-04 | 2006-10-05 | Jeffrey Zhu | Phase modulation for backscatter transponders |
| US20060255967A1 (en) * | 2005-04-22 | 2006-11-16 | Woo Henry S Y | Open road vehicle emissions inspection |
| EP1739630A1 (en) * | 2005-06-22 | 2007-01-03 | Siemens Schweiz AG | Method, electronic card holding device and access control system to grant access to an area by means of a card |
| US7385525B2 (en) * | 2005-07-07 | 2008-06-10 | Mark Iv Industries Corporation | Dynamic timing adjustment in an electronic toll collection system |
| WO2007030445A2 (en) * | 2005-09-07 | 2007-03-15 | Rent-A-Toll, Ltd. | System, method and computer readable medium for billing |
| US8768753B2 (en) * | 2005-09-07 | 2014-07-01 | Rent A Toll, Ltd. | System, method and computer readable medium for billing tolls |
| CA2560430C (en) * | 2005-09-21 | 2015-05-19 | Mark Iv Industries Corp. | Adaptive channel bandwith in an electronic toll collection system |
| US8195506B2 (en) * | 2005-10-13 | 2012-06-05 | Rent A Toll, Ltd. | System, method and computer readable medium for billing based on a duration of a service period |
| US20070118273A1 (en) * | 2005-11-21 | 2007-05-24 | Wai-Cheung Tang | Method and system for obtaining traffic information using transponders |
| CA2636507C (en) | 2006-01-09 | 2015-03-03 | Benjamin P. Robinson | Billing a rented third party transport including an on-board unit |
| US8768754B2 (en) * | 2006-01-09 | 2014-07-01 | Rent-A-Toll, Ltd. | Billing a rented third party transport including an on-board unit |
| WO2007095372A2 (en) * | 2006-02-14 | 2007-08-23 | Erg R & D Pty Ltd. | System and method for collection and processing of transit fares |
| US7342500B2 (en) * | 2006-03-24 | 2008-03-11 | Mark Iv Industries, Corp. | Compact microstrip transponder antenna |
| US7501961B2 (en) * | 2006-05-18 | 2009-03-10 | Rent A Toll, Ltd. | Determining a toll amount |
| US7388501B2 (en) * | 2006-05-19 | 2008-06-17 | Mark Iv Industries Corp | Method of enabling two-state operation of electronic toll collection system |
| KR101435966B1 (en) * | 2006-05-31 | 2014-08-29 | 가부시키가이샤 한도오따이 에네루기 켄큐쇼 | Semiconductor device and ic label, ic tag, and ic card having the same |
| US20070285280A1 (en) * | 2006-06-07 | 2007-12-13 | Rent-A-Toll, Ltd. | Providing toll services utilizing a cellular device |
| US7973641B1 (en) * | 2006-06-07 | 2011-07-05 | Yuanlin Huang | RFID based parking management system |
| US8917178B2 (en) * | 2006-06-09 | 2014-12-23 | Dominic M. Kotab | RFID system and method for storing information related to a vehicle or an owner of the vehicle |
| US20080040615A1 (en) * | 2006-06-30 | 2008-02-14 | Electronic Plastics, Llc | Biometric embedded device |
| US20080097924A1 (en) * | 2006-10-20 | 2008-04-24 | Electronic Plastics, Llc | Decentralized secure transaction system |
| US7774228B2 (en) * | 2006-12-18 | 2010-08-10 | Rent A Toll, Ltd | Transferring toll data from a third party operated transport to a user account |
| US8923827B2 (en) | 2007-01-09 | 2014-12-30 | Visa U.S.A. Inc. | Mobile payment management |
| US7667618B2 (en) * | 2007-04-22 | 2010-02-23 | International Business Machines Corporation | System and method for tracking and billing vehicle users based on when and in which road lanes their vehicles have been driven |
| US7952021B2 (en) | 2007-05-03 | 2011-05-31 | United Toll Systems, Inc. | System and method for loop detector installation |
| US8692655B2 (en) * | 2007-05-07 | 2014-04-08 | Bloomberg Finance L.P. | Dynamically programmable RFID transponder |
| US20080306868A1 (en) * | 2007-06-07 | 2008-12-11 | Rent-A-Toll, Ltd. | Unlimited toll utilization |
| US20090083185A1 (en) * | 2007-09-24 | 2009-03-26 | Rent-A-Toll, Ltd. | Reassigning toll violation information |
| US8527415B2 (en) * | 2007-12-27 | 2013-09-03 | Mastercard International, Inc. | Techniques for conducting financial transactions using mobile communication devices |
| US8083140B1 (en) * | 2008-02-05 | 2011-12-27 | Sprint Communications Company L.P. | System and method of over-the-air provisioning |
| US8076593B2 (en) | 2008-03-28 | 2011-12-13 | David Centner | Apparatus and method for supporting and shielding a wireless device |
| US20090278014A1 (en) * | 2008-05-06 | 2009-11-12 | Jim Allen | Overhead track system for roadways |
| US8804606B2 (en) * | 2008-08-11 | 2014-08-12 | Gilat Satellite Networks Ltd. | Transparent mesh overlay in hub-spoke satellite networks |
| US8363899B2 (en) * | 2008-10-10 | 2013-01-29 | Rent A Toll, Ltd. | Method and system for processing vehicular violations |
| US8706588B1 (en) | 2008-10-20 | 2014-04-22 | Sprint Communications Company L.P. | System and method of provisioning confidential information via a mobile device |
| US8060449B1 (en) | 2009-01-05 | 2011-11-15 | Sprint Communications Company L.P. | Partially delegated over-the-air provisioning of a secure element |
| US8768845B1 (en) | 2009-02-16 | 2014-07-01 | Sprint Communications Company L.P. | Electronic wallet removal from mobile electronic devices |
| US20100232132A1 (en) * | 2009-03-16 | 2010-09-16 | Highway Toll Administration, Llc | Flexible Transponder Holder |
| JP5697008B2 (en) * | 2009-06-18 | 2015-04-08 | 田中 雅英 | Vehicle information display device and vehicle information exchange device |
| US8514059B2 (en) * | 2009-08-06 | 2013-08-20 | Highway Toll Administration, Llc | Transponder holder for controlling the operation of a transponder |
| EP2360646B1 (en) * | 2010-01-29 | 2012-06-06 | Kapsch TrafficCom AG | Method for DSRC communication |
| US9135352B2 (en) * | 2010-06-03 | 2015-09-15 | Cisco Technology, Inc. | System and method for providing targeted advertising through traffic analysis in a network environment |
| EP2684180B1 (en) * | 2011-03-07 | 2023-04-12 | Intelligent Imaging Systems, Inc. | Vehicle traffic and vehicle related transaction control system |
| CA2840083A1 (en) * | 2011-06-29 | 2013-01-03 | Smart Plate, Inc. | System and methods for rendering content on a vehicle |
| US8902082B2 (en) * | 2011-10-11 | 2014-12-02 | Bruce B. Roesner | Communicating statuses of vehicles |
| US9141996B2 (en) | 2013-03-10 | 2015-09-22 | State Farm Mutual Automobile Insurance Company | Dynamic auto insurance policy quote creation based on tracked user data |
| EP2905749B1 (en) * | 2014-02-10 | 2021-09-22 | Continental Automotive GmbH | Communication method for a tolling system comprising a server and at least one on-board-unit |
| US11416841B2 (en) * | 2014-07-18 | 2022-08-16 | Tracfone Wireless, Inc. | Device and process for purchasing electronic content using multimedia messaging service messaging |
| US10043171B2 (en) * | 2014-12-10 | 2018-08-07 | Mastercard International Incorporated | System and method for performing automatic payment transactions |
| US10074219B2 (en) | 2014-12-17 | 2018-09-11 | Allstate Insurance Company | Toll payment equipment |
| US20160189067A1 (en) * | 2014-12-31 | 2016-06-30 | The City And County Of San Francisco | Application-based commercial ground transportation management system |
| US9650039B2 (en) * | 2015-03-20 | 2017-05-16 | Ford Global Technologies, Llc | Vehicle location accuracy |
| US10134210B1 (en) * | 2016-05-17 | 2018-11-20 | Amtech Systems, LLC | Vehicle tracking system using smart-phone as active transponder |
| US20180012197A1 (en) | 2016-07-07 | 2018-01-11 | NextEv USA, Inc. | Battery exchange licensing program based on state of charge of battery pack |
| US11092687B2 (en) * | 2016-09-12 | 2021-08-17 | Sew-Eurodrive Gmbh & Co. Kg | Method and system for position capture |
| US11132924B2 (en) * | 2017-09-22 | 2021-09-28 | The Boeing Company | Holder for a user identification badge and an associated method |
| US11405763B1 (en) * | 2021-03-31 | 2022-08-02 | Ford Global Technologies, Llc | V2X road usage charging |
| CN113393237B (en) * | 2021-05-28 | 2024-08-16 | 中国银联股份有限公司 | Secure payment method, positioning terminal, device, system and storage medium |
Family Cites Families (30)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US3602881A (en) * | 1968-09-03 | 1971-08-31 | Robert T Bayne | Automatic toll charging system |
| US4338587A (en) * | 1979-02-23 | 1982-07-06 | Chiappetti Arthur B | Toll collection system |
| US4303904A (en) * | 1979-10-12 | 1981-12-01 | Chasek Norman E | Universally applicable, in-motion and automatic toll paying system using microwaves |
| FR2469760A1 (en) * | 1979-11-09 | 1981-05-22 | Cii Honeywell Bull | METHOD AND SYSTEM FOR IDENTIFYING PEOPLE REQUESTING ACCESS TO CERTAIN MEDIA |
| US5196846A (en) * | 1980-02-13 | 1993-03-23 | Brockelsby William K | Moving vehicle identification system |
| ZA81888B (en) * | 1980-02-13 | 1982-03-31 | Sensory Systems Lab | Electronic identification system |
| FR2530053B1 (en) * | 1982-07-08 | 1986-04-25 | Bull Sa | METHOD FOR CERTIFYING THE SOURCE OF AT LEAST ONE INFORMATION RECORDED IN A MEMORY OF A FIRST ELECTRONIC DEVICE AND TRANSMITTED TO A SECOND ELECTRONIC DEVICE, AND SYSTEM FOR IMPLEMENTING SUCH A METHOD |
| US4555618A (en) * | 1983-06-02 | 1985-11-26 | R L Associates | Method and means for collecting highway tolls |
| GB8509135D0 (en) * | 1985-04-10 | 1985-05-15 | Gen Electric Co Plc | Transaction system |
| US4757537A (en) * | 1985-04-17 | 1988-07-12 | Pitney Bowes Inc. | System for detecting unaccounted for printing in a value printing system |
| FR2597229B1 (en) * | 1986-04-11 | 1991-01-11 | Flonic Sa | ELECTRONIC MEMORY CARD PROCESSING DEVICE FOR PROVIDING BENEFITS |
| US4798322A (en) * | 1986-04-28 | 1989-01-17 | American Telephone And Telegraph Company | Card reader/writer station for use with a personal memory card using differential data transfer |
| US4795898A (en) * | 1986-04-28 | 1989-01-03 | American Telephone And Telegraph Company | Personal memory card having a contactless interface using differential data transfer |
| US4870604A (en) * | 1986-05-15 | 1989-09-26 | Tokyo Tatsuno Co., Ltd. | Portable data processing device |
| US4791283A (en) * | 1986-06-03 | 1988-12-13 | Intellicard International, Inc. | Transaction card magnetic stripe emulator |
| JP2534235B2 (en) * | 1986-08-11 | 1996-09-11 | 三菱重工業株式会社 | Terminals for toll collection on toll roads |
| FR2607544A1 (en) * | 1986-11-27 | 1988-06-03 | Neiman Sa | Electronic lock with periodic code change |
| FR2627610B1 (en) * | 1988-02-22 | 1991-04-05 | Cga Hbs | FEEDING SYSTEM FOR TRANSPORT USERS |
| JPH01319898A (en) * | 1988-06-21 | 1989-12-26 | Mitsubishi Electric Corp | Toll collecting device |
| WO1990000781A1 (en) * | 1988-07-13 | 1990-01-25 | Matsushita Electric Industrial Co., Ltd. | Communication equipment |
| JP2612190B2 (en) * | 1988-08-31 | 1997-05-21 | 山武ハネウエル株式会社 | Full-duplex communication device consisting of answering device and interrogation device |
| BE1003237A5 (en) * | 1989-06-02 | 1992-02-04 | Baets Thierry De | AUTOMATIC TAXATION OR TOLL SYSTEM FOR ROAD VEHICLES. |
| FR2652216B1 (en) * | 1989-09-20 | 1991-12-13 | Rockwell Cim | METHOD AND DEVICE FOR GENERATING AND VALIDATING A DIGITAL MESSAGE AND APPLICATION OF SUCH A DEVICE. |
| IT1236633B (en) * | 1989-10-25 | 1993-03-25 | AUTOMATIC TOLL Collection System | |
| US5086389A (en) * | 1990-05-17 | 1992-02-04 | Hassett John J | Automatic toll processing apparatus |
| US5144553A (en) * | 1990-05-17 | 1992-09-01 | Hassett John J | Electronic vehicle toll collection system and method |
| JP2543235B2 (en) * | 1990-06-29 | 1996-10-16 | 松下電器産業株式会社 | IC card adapter |
| US5163098A (en) * | 1990-09-06 | 1992-11-10 | Dahbura Abbud S | System for preventing fraudulent use of credit card |
| US5099226A (en) * | 1991-01-18 | 1992-03-24 | Interamerican Industrial Company | Intelligent security system |
| US5193114A (en) * | 1991-08-08 | 1993-03-09 | Moseley Donald R | Consumer oriented smart card system and authentication techniques |
-
1992
- 1992-07-02 US US07/908,195 patent/US5310999A/en not_active Expired - Lifetime
-
1993
- 1993-04-28 CA CA002095065A patent/CA2095065C/en not_active Expired - Fee Related
- 1993-06-24 DE DE69321166T patent/DE69321166T2/en not_active Revoked
- 1993-06-24 EP EP93304925A patent/EP0577328B1/en not_active Revoked
- 1993-07-02 JP JP18869093A patent/JP2837612B2/en not_active Expired - Lifetime
Also Published As
| Publication number | Publication date |
|---|---|
| JPH0660237A (en) | 1994-03-04 |
| DE69321166D1 (en) | 1998-10-29 |
| JP2837612B2 (en) | 1998-12-16 |
| EP0577328A3 (en) | 1995-10-25 |
| US5310999A (en) | 1994-05-10 |
| DE69321166T2 (en) | 1999-04-08 |
| EP0577328A2 (en) | 1994-01-05 |
| CA2095065A1 (en) | 1994-01-03 |
| EP0577328B1 (en) | 1998-09-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA2095065C (en) | Secure toll collection system for moving vehicles | |
| AU682923B2 (en) | Electronic toll payment | |
| EP1042738B1 (en) | Method for automatic debiting of tolls for vehicles | |
| US5832090A (en) | Radio frequency transponder stored value system employing a secure encryption protocol | |
| US5602919A (en) | Speedup for monetary transactions using a transponder in conjunction with a smartcard | |
| RU2390846C2 (en) | Passenger transportation system and ticketing method for said system | |
| EP0702336A2 (en) | Smart card techniques for motor vehicle record administration | |
| MY110840A (en) | Electronic traffic tariff reception system and vehicle identification appararus | |
| US20040140355A1 (en) | Automated system for filling in and delivering offence tickets | |
| EP0588049B1 (en) | Method and apparatus for controlling speed excess of a moving object | |
| GB2278704A (en) | Apparatus for pricing road usage by vehicles | |
| WO2003019478A1 (en) | Combined payment system and method to reduce congestion of vehicles in metropolitan areas and freeways | |
| US20070024466A1 (en) | System for controlling information relating to a vehicle | |
| US20060047567A1 (en) | Method and installation for pay parking management | |
| JP4037516B2 (en) | Device for preventing unauthorized use of automatic fee collection system | |
| JPH1027206A (en) | Electronic purse illegal use preventing system | |
| JPH10134214A (en) | System and method for toll collection | |
| JP2004272397A (en) | Radio terminal device and identification confirmation method | |
| MXPA96002941A (en) | Pe electronic payment | |
| Mesqui et al. | Automatic debiting systems, a new approach for toll roads | |
| Hills et al. | Technological Developments in Road Pricing | |
| Horie et al. | Hitachi Makes a Significant Contribution to the Construction of Secure and Reliable ETC Systems in Japan | |
| GB2385700A (en) | Wireless smart card system and method to reduce congestion of vehicles |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| EEER | Examination request | ||
| MKLA | Lapsed |